| commit | 75a98b56ab8b06e3d708c269ab545ad0f5419b3a | [log] [tgz] |
|---|---|---|
| author | Bart Van Assche <bvanassche@google.com> | Wed Feb 23 18:55:06 2022 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Wed Feb 23 18:55:06 2022 +0000 |
| tree | ead9ee294eca0a8b8cce9f54c2be2f74b019ac7d | |
| parent | f9489027a18c800a71e537da06747c37db198af6 [diff] | |
| parent | 5ebc4e8f5112f5fb21e19a5db1ce692ae0196d3b [diff] |
lmkd: Fix a potential buffer overflow am: 5ebc4e8f51 Original change: https://android-review.googlesource.com/c/platform/system/memory/lmkd/+/1972105 Change-Id: I4dca955fd118a16fc3bd1a37beeb8fe317bcbcc2
diff --git a/lmkd.cpp b/lmkd.cpp index 40aa043..7f0ca58 100644 --- a/lmkd.cpp +++ b/lmkd.cpp
@@ -835,7 +835,7 @@ while (1) { char rd_buf[256]; - int bytes_read = TEMP_FAILURE_RETRY(pread(poll_fd, (void*)rd_buf, sizeof(rd_buf), 0)); + int bytes_read = TEMP_FAILURE_RETRY(pread(poll_fd, (void*)rd_buf, sizeof(rd_buf) - 1, 0)); if (bytes_read <= 0) break; rd_buf[bytes_read] = '\0';