summaryrefslogtreecommitdiff
path: root/util
diff options
context:
space:
mode:
authorPatrick Georgi <pgeorgi@google.com>2020-06-29 17:15:25 +0200
committerCommit Bot <commit-bot@chromium.org>2021-09-11 23:40:09 +0000
commit8fc33820d3e8a2a2b733450f70b33bf1648e9a32 (patch)
tree6e80b6d15b02ad0b296200ff388a25684bb51fe9 /util
parent0bdfe3bacc35d4f651b3e97132615732fb3597b4 (diff)
downloadchrome-ec-8fc33820d3e8a2a2b733450f70b33bf1648e9a32.tar.gz
util/ecst: Make sure that copying back arguments doesn't exceed MAX_ARGS
Newer gcc than we have in CrOS shows a non-helpful error message: util/ecst.c: In function 'main': util/ecst.c:398:7: error: 'strncpy' output may be truncated copying 100 bytes from a string of length 9999 [-Werror=stringop-truncation] 398 | strncpy(hdr_args[arg_ind++], | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ 399 | tmp_hdr_args[tmp_ind], | ~~~~~~~~~~~~~~~~~~~~~~ 400 | ARG_SIZE); | ~~~~~~~~~ In the end it's about gcc not being able to ensure that hdr_args[] doesn't overflow. BUG=none BRANCH=none TEST=gcc 9.3 as shipped with debian sid compiles ecst without error Change-Id: I2c30cdfaac0305ea4e4c19477469bcf497469caa Signed-off-by: Patrick Georgi <pgeorgi@google.com> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/2273240 Tested-by: Patrick Georgi <pgeorgi@chromium.org> Reviewed-by: Paul Fagerburg <pfagerburg@chromium.org> Commit-Queue: Patrick Georgi <pgeorgi@chromium.org> (cherry picked from commit 3a838d11ae131526b1524a03789f11300f095c9b) Signed-off-by: Gwendal Grignou <gwendal@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/3145682 Reviewed-by: Yuval Peress <peress@google.com>
Diffstat (limited to 'util')
-rwxr-xr-xutil/ecst.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/util/ecst.c b/util/ecst.c
index 328587e8d9..a46d444817 100755
--- a/util/ecst.c
+++ b/util/ecst.c
@@ -391,7 +391,8 @@ int main(int argc, char *argv[])
/* Copy back the restored arguments. */
for (tmp_ind = 0;
- tmp_ind < tmp_arg_num;
+ (tmp_ind < tmp_arg_num) &&
+ (arg_ind < MAX_ARGS);
tmp_ind++) {
strncpy(hdr_args[arg_ind++],
tmp_hdr_args[tmp_ind],