CID 1373518: Memory corruption (off-by-one)diff -r1.2 -r1.3 xsrc/external/mit/xorg-server/dist/hw/xfree86/drivers/modesetting/drmmode_display.c
(christos)
--- xsrc/external/mit/xorg-server/dist/hw/xfree86/drivers/modesetting/drmmode_display.c 2016/10/07 15:43:38 1.2
+++ xsrc/external/mit/xorg-server/dist/hw/xfree86/drivers/modesetting/drmmode_display.c 2016/10/07 15:55:36 1.3
@@ -1370,7 +1370,7 @@
if (!conn)
return -1;
len = conn - (blob_data + 4);
- if (len + 1> 5)
+ if (len + 1 >= sizeof(conn_id))
return -1;
memcpy(conn_id, blob_data + 4, len);
conn_id[len + 1] = '\0';