Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Jul 2019 23:58:30 +0000 (UTC)
From:      Brooks Davis <brooks@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r350160 - head/lib/libc/tests/string
Message-ID:  <201907192358.x6JNwUhY065039@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: brooks
Date: Fri Jul 19 23:58:30 2019
New Revision: 350160
URL: https://svnweb.freebsd.org/changeset/base/350160

Log:
  Avoid copying too much from the input string.
  
  This avoids reading past the end of the static strings.  On a system
  with bounds checking these tests fault.
  
  Reviewed by:	asomers
  Obtained from:	CheriBSD
  MFC after:	1 week
  Sponsored by:	DARPA, AFRL
  Differential Revision:	https://reviews.freebsd.org/D21004

Modified:
  head/lib/libc/tests/string/wcsnlen_test.c

Modified: head/lib/libc/tests/string/wcsnlen_test.c
==============================================================================
--- head/lib/libc/tests/string/wcsnlen_test.c	Fri Jul 19 23:39:21 2019	(r350159)
+++ head/lib/libc/tests/string/wcsnlen_test.c	Fri Jul 19 23:58:30 2019	(r350160)
@@ -65,7 +65,7 @@ test_wcsnlen(const wchar_t *s)
 	for (i = 0; i <= 1; i++) {
 		for (bufsize = 0; bufsize <= size + 10; bufsize++) {
 			s1 = makebuf(bufsize * sizeof(wchar_t), i);
-			wmemcpy(s1, s, bufsize);
+			wmemcpy(s1, s, bufsize <= size ? bufsize : size);
 			len = (size > bufsize) ? bufsize : size - 1;
 			ATF_CHECK(wcsnlen(s1, bufsize) == len);
 		}



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201907192358.x6JNwUhY065039>