falso
/
cdesktopenv
mirror of https://git.code.sf.net/p/cdesktopenv/code
1
0
Fork 0
Code Issues Releases Wiki Activity

tt_isam_record.C: fix CERT VU#387387 part 2

This commit is contained in:
Jon Trulson 2012-05-26 18:29:26 -06:00
parent e820f21540
commit 95e6fd42cc
1 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
cde/lib/tt/bin/ttdbserverd/tt_isam_record.C
View File

@ -159,5 +159,18 @@ void _Tt_isam_record::setBytes (int start,
int length,
const _Tt_string &value)
{
(void)memcpy((char *)buffer+start, (char *)value, length);
// JET - CERT vulnerability: VU#387387 - value is user supplied.
// Geez.
int bavail = (maxLength - start);
int bcp = 0;
if (bavail <= 0)
return;
if (bavail > length)
bcp = length;
else
bcp = bavail;
(void)memcpy((char *)buffer+start, (char *)value, bcp);
}