commit d552194e1b9992e8c2aac4974b5831f1c2fa7c70
parent 53b36de8db2ed7d8b60d37afc544393e9cb603cd
Author: Colin Leroy <colin@colino.net>
Date: Fri, 13 Nov 2015 10:15:21 +0100
Fix overflow
Diffstat:
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/plugins/notification/notification_core.c b/src/plugins/notification/notification_core.c
@@ -653,22 +653,22 @@ gchar* notification_libnotify_sanitize_str(gchar *in)
i_out = 0;
while(*in) {
if(*in == '<') {
- if(i_out+3 > STR_MAX_LEN) break;
+ if(i_out+3 >= STR_MAX_LEN) break;
memcpy(&(tmp_str[i_out]),"<",4);
in++; i_out += 4;
}
else if(*in == '>') {
- if(i_out+3 > STR_MAX_LEN) break;
+ if(i_out+3 >= STR_MAX_LEN) break;
memcpy(&(tmp_str[i_out]),">",4);
in++; i_out += 4;
}
else if(*in == '&') {
- if(i_out+4 > STR_MAX_LEN) break;
+ if(i_out+4 >= STR_MAX_LEN) break;
memcpy(&(tmp_str[i_out]),"&",5);
in++; i_out += 5;
}
else {
- if(i_out > STR_MAX_LEN) break;
+ if(i_out >= STR_MAX_LEN) break;
tmp_str[i_out++] = *in++;
}
}