godotengine/godot
1
0
Fork 0
mirror of https://github.com/godotengine/godot.git synced 2025-11-08 12:40:44 +00:00
Code Releases Wiki Activity

Merge pull request #20772 from dragmz/string_copy_oob_read_fix

Browse Source 
Fix out of buffer read when copying from a non-null-terminated string
This commit is contained in:
Rémi Verschelde
2018-08-14 15:47:34 +02:00
committed by GitHub
parent 8c38bab6d7 f3b2689aa6
commit 9a6e4d10b4
2 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
core/ustring.cpp
View File

@@ -148,7 +148,7 @@ void String::copy_from(const char *p_cstr) {
}
}
void String::copy_from(const CharType *p_cstr, int p_clip_to) {
void String::copy_from(const CharType *p_cstr, const int p_clip_to) {
if (!p_cstr) {
@@ -158,12 +158,9 @@ void String::copy_from(const CharType *p_cstr, int p_clip_to) {
int len = 0;
const CharType *ptr = p_cstr;
while (*(ptr++) != 0)
while ((p_clip_to < 0 || len < p_clip_to) && *(ptr++) != 0)
len++;
if (p_clip_to >= 0 && len > p_clip_to)
len = p_clip_to;
if (len == 0) {
resize(0);
@@ -177,7 +174,7 @@ void String::copy_from(const CharType *p_cstr, int p_clip_to) {
// p_char != NULL
// p_length > 0
// p_length <= p_char strlen
void String::copy_from_unchecked(const CharType *p_char, int p_length) {
void String::copy_from_unchecked(const CharType *p_char, const int p_length) {
resize(p_length + 1);
set(p_length, 0);