[Intel-gfx] [intel-gpu-tools PATCH] Fix out of bounds memory access

Daniel Vetter daniel at ffwll.ch
Sun Jan 6 18:21:27 CET 2013


On Tue, Dec 25, 2012 at 06:06:57PM +0100, Thomas Jarosch wrote:
> cppcheck reported:
> [tools/intel_infoframes.c:836]: (error) Width 31 given in format string
> (no. 1) is larger than destination buffer 'option[16]',
> use %15s to prevent overflowing it.
> 
> Signed-off-by: Thomas Jarosch <thomas.jarosch at intra2net.com>

Applied, thanks for the patch.
-Daniel

> ---
>  tools/intel_infoframes.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/tools/intel_infoframes.c b/tools/intel_infoframes.c
> index 66351ac..09fdcb9 100644
> --- a/tools/intel_infoframes.c
> +++ b/tools/intel_infoframes.c
> @@ -833,7 +833,7 @@ static void change_spd_infoframe(Transcoder transcoder, char *commands)
>  	val = INREG(reg);
>  
>  	while (1) {
> -		rc = sscanf(current, "%31s%n", option, &read);
> +		rc = sscanf(current, "%15s%n", option, &read);
>  		current = &current[read];
>  		if (rc == EOF) {
>  			break;
> -- 
> 1.7.11.7
> 
> _______________________________________________
> Intel-gfx mailing list
> Intel-gfx at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/intel-gfx

-- 
Daniel Vetter
Software Engineer, Intel Corporation
+41 (0) 79 365 57 48 - http://blog.ffwll.ch



More information about the Intel-gfx mailing list