Rockbox.org home
release
dev builds
extras
themes manual
wiki
device status forums
mailing lists
IRC bugs
patches
dev guide



Rockbox mail archive

Subject: Re: Buffering strangeness on the Sansa e200.

Re: Buffering strangeness on the Sansa e200.

From: Bryan Childs <godeater_at_gmail.com>
Date: Wed, 23 Jan 2008 08:22:08 +0000

On Jan 23, 2008 8:11 AM, pondlife <pondlife_at_ntlworld.com> wrote:
> > Even though the strip_extension changes can cause buffer overflows in
> > albumart.c...

The version that Nico had in albumart.c of strip_extension() used to
take a length argument for the filename. Changing it to use the
existing implementation of strip_extension used everywhere else in
Rockbox meant ditching that argument - so the strcpy() in the
strip_extension() function being used now *could* cause a buffer
overflow if the destination buffer you pass in is shorter than the
filename. However, as albumart.c only calls strip_extension() once,
and the destination buffer's size is MAX_PATH + 1, I don't really see
how this could actually occur.

Bry
Received on 2008-01-23


Page was last modified "Jan 10 2012" The Rockbox Crew
aaa