From 90e965be6d90fcf729b020dba675b062b59ee17d Mon Sep 17 00:00:00 2001 From: Andriy Gelman Date: Thu, 8 Aug 2019 10:37:10 -0400 Subject: [PATCH] tools/zmqsend: Avoid mem copy past the end of input buffer This patch avoids a read past the end of the input buffer in memcpy since the size of the received zmq message is recv_buf_size - 1. Reviewed-by: Paul B Mahol Signed-off-by: Michael Niedermayer --- tools/zmqsend.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/zmqsend.c b/tools/zmqsend.c index 7bd7fe4199..f26fa9c1c2 100644 --- a/tools/zmqsend.c +++ b/tools/zmqsend.c @@ -155,7 +155,7 @@ int main(int argc, char **argv) ret = 1; goto end; } - memcpy(recv_buf, zmq_msg_data(&msg), recv_buf_size); + memcpy(recv_buf, zmq_msg_data(&msg), recv_buf_size - 1); recv_buf[recv_buf_size-1] = 0; printf("%s\n", recv_buf); zmq_msg_close(&msg);