michaelh/zephyr
1
0
Fork 0
Code Releases Activity

drivers: sbs_gauge: Fix buffer overflow

Browse source 
Fixes buffer overflow when trying to copy 5 bytes to 4 bytes array.

Signed-off-by: Andrei Emeltchenko <andrei.emeltchenko@intel.com>
This commit is contained in:
Andrei Emeltchenko 2023-05-22 16:36:41 +03:00 • committed by Carles Cufí
commit f6211e2641
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
drivers/fuel_gauge/sbs_gauge/emul_sbs_gauge.c
View file

@ -141,7 +141,8 @@ static int emul_sbs_gauge_buffer_read(const struct emul *target, int reg, char *
break; break;
case SBS_GAUGE_CMD_DEVICE_CHEMISTRY: case SBS_GAUGE_CMD_DEVICE_CHEMISTRY:
dev_chem->device_chemistry_length = sizeof(chem); dev_chem->device_chemistry_length = MIN(sizeof(chem),
sizeof(dev_chem->device_chemistry));
memcpy(dev_chem->device_chemistry, chem, dev_chem->device_chemistry_length); memcpy(dev_chem->device_chemistry, chem, dev_chem->device_chemistry_length);
break; break;
default: default: