shithub: openh264

Info  •  Files  •  Log  •  Branches

Check a string length before doing a strncpy

--- a/codec/console/enc/src/welsenc.cpp

+++ b/codec/console/enc/src/welsenc.cpp

@@ -546,6 +546,8 @@

       unsigned int	iLayer = atoi (argv[n++]);

       const int iLen = strlen (argv[n]);

       SDLayerParam* pDLayer = &pSvcParam.sDependencyLayers[iLayer];

+      if (iLen >= sizeof(pDLayer->sRecFileName))

+        return 1;

       pDLayer->sRecFileName[iLen] = '\0';

       strncpy (pDLayer->sRecFileName, argv[n++], iLen);	// confirmed_safe_unsafe_usage

 #else