rottenwheel/monero
1
0
Fork 0
mirror of https://codeberg.org/anoncontributorxmr/monero.git synced 2024-12-01 19:53:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

device_ledger: fix potential buffer overflow from bad size calc

Browse source
This commit is contained in:
moneromooo-monero 2018-06-23 15:26:22 +01:00
parent 9a3712541e
commit 3b4dec2d12
No known key found for this signature in database
GPG key ID: 686F07454D6CEFC3
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/device/device_ledger.cpp
View file

@ -194,7 +194,8 @@ namespace hw {
this->buffer_send[3], this->buffer_send[3],
this->buffer_send[4] this->buffer_send[4]
); );
buffer_to_str(strbuffer+strlen(strbuffer), sizeof(strbuffer), (char*)(this->buffer_send+5), this->length_send-5); const size_t len = strlen(strbuffer);
buffer_to_str(strbuffer+len, sizeof(strbuffer)-len, (char*)(this->buffer_send+5), this->length_send-5);
MDEBUG( "CMD :" << strbuffer); MDEBUG( "CMD :" << strbuffer);
} }
} }
@ -206,7 +207,8 @@ namespace hw {
this->buffer_recv[this->length_recv-2], this->buffer_recv[this->length_recv-2],
this->buffer_recv[this->length_recv-1] this->buffer_recv[this->length_recv-1]
); );
buffer_to_str(strbuffer+strlen(strbuffer), sizeof(strbuffer), (char*)(this->buffer_recv), this->length_recv-2); const size_t len = strlen(strbuffer);
buffer_to_str(strbuffer+len, sizeof(strbuffer)-len, (char*)(this->buffer_recv), this->length_recv-2);
MDEBUG( "RESP :" << strbuffer); MDEBUG( "RESP :" << strbuffer);
} }