commit f8a2794a63a2ffe5ca2a4b34d3dfe6bccd0b7b55
author Prasath Balakrishnan <bpras@codeaurora.org> Wed Aug 05 14:53:50 2015 +0530
committer Linux Build Service Account <lnxbuild@localhost> Tue Oct 06 03:20:16 2015 -0600
tree c1f46c1bfdfffdcc38f416acceb71119fdfd6d6c
parent b31c3240ab910775fe1ffc5c50058cbb8ca7444f

Fix for rild crash becasue of buffer overflow

There is a buffer overflow which causing rild crash. For
appendPrintBuf, "sprintf" is replaced with "snprintf" for
the safe copy operation.

Change-Id: I25430a5c6f2a8b19a3271235323499b6ee802746
CRs-Fixed: 881515

libril/ril.cpp

diff --git a/libril/ril.cpp b/libril/ril.cpp
index 62c51de..c9e4a87 100755
--- a/libril/ril.cpp
+++ b/libril/ril.cpp
@@ -109,7 +109,7 @@
 
     #define clearPrintBuf           printBuf[0] = 0
     #define removeLastChar          printBuf[strlen(printBuf)-1] = 0
-    #define appendPrintBuf(x...)    sprintf(printBuf, x)
+    #define appendPrintBuf(x...)    snprintf(printBuf, PRINTBUF_SIZE, x)
 #else
     #define startRequest
     #define closeRequest