Changeset 3047 for pjproject/trunk/pjlib/src/pj/unicode_symbian.cpp

Timestamp:

Jan 6, 2010 2:35:13 PM (14 years ago)

Author:

bennylp

Message:

Ticket #1012: Potential buffer overflow in Unicode string conversion (thanks Orville Pike for the report)

File:

• pjproject/trunk/pjlib/src/pj/unicode_symbian.cpp (modified) (2 diffs)

pjproject/trunk/pjlib/src/pj/unicode_symbian.cpp

@@ -39 +39 @@
         *wbuf = 0;
     } else {
-        wbuf[len] = 0;
+        if (len < wbuf_count)
+            wbuf[len] = 0;
+        else
+            wbuf[len-1] = 0;
     }
 
@@ -62 +65 @@
         buf[0] = '\0';
     } else {
-        buf[len] = '\0';
+        if (len < buf_size)
+            buf[len] = '\0';
+        else
+            buf[len-1] = '\0';
     }