diff options
| author | Marcus Meissner <meissner@suse.de> | 2020-06-12 10:40:45 +0200 |
|---|---|---|
| committer | Marcus Meissner <meissner@suse.de> | 2020-06-12 10:40:45 +0200 |
| commit | cf72c10c500e2ae4d749ac0af8b30c9c07b5fc41 (patch) | |
| tree | 055d2f86f7a07a95e0989bf2b1e2fa2221c56e03 /camlibs/agfa-cl20 | |
| parent | 9603416d40f58130375705ae6945b57d774ffd43 (diff) | |
| download | libgphoto2-cf72c10c500e2ae4d749ac0af8b30c9c07b5fc41.tar.gz | |
add safety buffer for memmove and short app1len (AFL)
Diffstat (limited to 'camlibs/agfa-cl20')
| -rw-r--r-- | camlibs/agfa-cl20/agfa_cl20.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/camlibs/agfa-cl20/agfa_cl20.c b/camlibs/agfa-cl20/agfa_cl20.c index deaef4bd0..d63b27e1a 100644 --- a/camlibs/agfa-cl20/agfa_cl20.c +++ b/camlibs/agfa-cl20/agfa_cl20.c @@ -187,7 +187,7 @@ get_file_func (CameraFilesystem *fs, const char *folder, const char *filename, if (resolution == 1) { char dummy; - result = calloc(size, 0x100); + result = calloc((size + 1), 0x100); ptr = result; gp_port_usb_msg_read(camera->port,0x00,0x0000,0x0521,&dummy,0x0001); @@ -388,7 +388,7 @@ get_file_func (CameraFilesystem *fs, const char *folder, const char *filename, size = indata[ 5 ] + (indata[ 6 ] * 0xFF) + 3; - result = calloc(size, 0x100); + result = calloc((size+1), 0x100); ptr = result; gp_port_usb_msg_read(camera->port,0x00,0x0000,0x0521,&dummy,0x0001); |