diff options
| author | David 'Digit' Turner <digit@google.com> | 2011-01-17 01:59:22 +0100 |
|---|---|---|
| committer | David 'Digit' Turner <digit@google.com> | 2011-01-19 02:18:32 +0100 |
| commit | 3311eea1d3881e6f3d6806988b7db3de0a5f68d5 (patch) | |
| tree | 428b6084959008ff84bec67115ca033a0f1a72e2 /libsysutils/src/SocketClient.cpp | |
| parent | a42f152b4ae365e2f8d232237a8aa0168061feb4 (diff) | |
libsysutils: Fix NetLinkEvent security issues.
The issues were the following:
- The code in decode() didn't handle the degenerate case where the input buffer is full of '@'
- The code in decode() assumed the input buffer is properly zero-terminated.
- The code in decode() would not check that it doesn't overwrite the mParams[] array.
- The code in findParam() would check mParams[i] before checking the value of 'i'
Also remove un-necessary calls to strlen() at runtime.
Change-Id: I8acead959bd10d97c5380b08958fcb796248a010
Diffstat (limited to 'libsysutils/src/SocketClient.cpp')
0 files changed, 0 insertions, 0 deletions