openharmony/startup_init
1
0
Fork 0
mirror of https://gitee.com/openharmony/startup_init synced 2024-11-23 16:20:00 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

!2980 函数ParseUeventdConfigFile里面的st_size有缓冲区溢出风险问题修复

Browse Source 
Merge pull request !2980 from zl郑磊/0717_master
This commit is contained in:
openharmony_ci 2024-07-18 07:41:19 +00:00 committed by Gitee
commit 61061796b3
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
interfaces/innerkits/fs_manager/erofs_overlay/erofs_mount_overlay.c
View File

@ -149,6 +149,10 @@ static uint64_t GetFsSize(int fd)
return 0;
}
} else if (S_ISREG(st.st_mode)) {
if (st.st_size < 0) {
BEGET_LOGE("st_size is not right. st_size: %lld", st.st_size);
return 0;
}
size = (uint64_t)st.st_size;
} else {
BEGET_LOGE("unspported type st_mode:[%llu]", st.st_mode);

6
ueventd/ueventd_read_cfg.c
View File

@ -32,6 +32,7 @@
// default item count in config files
#define DEFAULTITEMCOUNT (50)
#define MAX_CONFIGURE_SIZE (1024 * 1024 * 16)
typedef enum SECTION {
SECTION_INVALID = -1,
@ -255,6 +256,11 @@ void ParseUeventdConfigFile(const char *file)
}
// st_size should never be less than 0
if (st.st_size < 0 || st.st_size > MAX_CONFIGURE_SIZE) {
INIT_LOGE("Invalid configure file with size");
close(fd);
return;
}
size_t size = (size_t)st.st_size;
char *buffer = malloc(size + 1);
if (buffer == NULL) {