[PATCH 0/3] fix generated parser code to check for buffer overflow

Thomas Haller thaller at redhat.com
Mon Oct 6 06:15:31 PDT 2014


Related: https://bugzilla.redhat.com/show_bug.cgi?id=1031738

Reported-by: Florian Weimer <fweimer at redhat.com>

Thomas Haller (3):
  fix code generation for emit_size_read() to check for buffer overflow
  assert input buffer size for
    qmi_utils_write_(fixed_size)?string_to_buffer()
  avoid buffer overlow in emit_input_tlv_add()

 build-aux/qmi-codegen/Field.py            | 12 +++++++-
 build-aux/qmi-codegen/Variable.py         |  2 +-
 build-aux/qmi-codegen/VariableArray.py    | 30 ++++++++++--------
 build-aux/qmi-codegen/VariableInteger.py  | 46 +++++++++++++++++++++++-----
 build-aux/qmi-codegen/VariableSequence.py |  4 +--
 build-aux/qmi-codegen/VariableString.py   | 51 +++++++++++++++++++------------
 build-aux/qmi-codegen/VariableStruct.py   |  4 +--
 src/libqmi-glib/qmi-utils.c               | 15 ++++++---
 8 files changed, 116 insertions(+), 48 deletions(-)

-- 
1.9.3



More information about the libqmi-devel mailing list