diff options
| author | Vincent Palatin <vpalatin@chromium.org> | 2012-01-13 15:05:34 -0800 |
|---|---|---|
| committer | Gerrit <chrome-bot@google.com> | 2012-01-13 16:00:43 -0800 |
| commit | c98691ab0e592a4806607192d12a45a9af69d5a0 (patch) | |
| tree | 9f0eff67e75b66e12be1733774af171801a90542 /common | |
| parent | 45a25a37f94d0d3816c97319ed67f320247e26b6 (diff) | |
stdio: fix stack memory corruption
When copying the device name, the temporary target variable was twice
smaller than the copy size.
Create a define to ensure this won't break again.
Signed-off-by: Vincent Palatin <vpalatin@chromium.org>
BUG=chrome-os-partner:7188 chrome-os-partner:7430 chrome-os-partner:7432
chrome-os-partner:7559
TEST=On lumpy with usb keyboard configured, run in recovery mode, insert
a bad key, press tab, remove the key, press tab. The recovery info are
displayed properly.
Change-Id: Ia9e765555d2f4efba81b8c389be2778cf2b92db0
Reviewed-on: https://gerrit.chromium.org/gerrit/14185
Commit-Ready: Vincent Palatin <vpalatin@chromium.org>
Tested-by: Vincent Palatin <vpalatin@chromium.org>
Reviewed-by: Stefan Reinauer <reinauer@chromium.org>
Diffstat (limited to 'common')
| -rw-r--r-- | common/stdio.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/common/stdio.c b/common/stdio.c index f64909d9e1..8b31a7d1f8 100644 --- a/common/stdio.c +++ b/common/stdio.c @@ -160,7 +160,7 @@ int stdio_deregister(const char *devname) int l; struct list_head *pos; struct stdio_dev *dev; - char temp_names[3][8]; + char temp_names[MAX_FILES][STDIO_NAME_SIZE]; dev = stdio_get_by_name(devname); |