diff options
| author | Christopher Ferris <cferris@google.com> | 2021-10-12 14:24:36 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2021-10-12 14:24:36 +0000 |
| commit | 488880cb431d6cdbd9fa173a3d0805a264c96090 (patch) | |
| tree | d29110f02a00665a9296772627d02f532c5ff41b | |
| parent | 76eeeea93884a621bf90927437b64fc5867a9abd (diff) | |
| parent | 187a6ec5483e2102568a904cc091e3eba5a00187 (diff) | |
Do not write past end of inotify event structure. am: 187a6ec548
Original change: https://googleplex-android-review.googlesource.com/c/platform/bootable/recovery/+/16033753
Change-Id: I81f74aaebf9694113a2d24f5e31d4a8929e1efdd
| -rw-r--r-- | minui/events.cpp | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/minui/events.cpp b/minui/events.cpp index 87f81122..863ac747 100644 --- a/minui/events.cpp +++ b/minui/events.cpp @@ -29,7 +29,9 @@ #include <functional> #include <memory> +#include <string> +#include <android-base/strings.h> #include <android-base/unique_fd.h> #include "minui/minui.h" @@ -118,12 +120,12 @@ static int inotify_cb(int fd, __unused uint32_t epevents) { } offset += sizeof(inotify_event) + pevent->len; - pevent->name[pevent->len] = '\0'; - if (strncmp(pevent->name, "event", 5)) { + std::string event_name(pevent->name, pevent->len); + if (!android::base::StartsWith(event_name, "event")) { continue; } - android::base::unique_fd dfd(openat(dirfd(dir.get()), pevent->name, O_RDONLY)); + android::base::unique_fd dfd(openat(dirfd(dir.get()), event_name.c_str(), O_RDONLY)); if (dfd == -1) { break; } |