diff options
| author | Yong Yeon Kim <yy9875.kim@samsung.com> | 2013-10-22 18:50:13 +0900 |
|---|---|---|
| committer | Yong Yeon Kim <yy9875.kim@samsung.com> | 2013-10-22 18:50:13 +0900 |
| commit | 5020e5f96998c8a27099b4b4e29fe392a854712c (patch) | |
| tree | f825a4f3341e313db942e688acc7e4eb105a6e29 | |
| parent | 69e98719ac62c7f99f39d6383da67994574a06e7 (diff) | |
| download | libmedia-thumbnail-tizen_2.2.tar.gz libmedia-thumbnail-tizen_2.2.tar.bz2 libmedia-thumbnail-tizen_2.2.zip | |
fix prevent bugssubmit/tizen_2.2/20131107.0608132.2.1_releasetizen_2.2
| -rw-r--r-- | packaging/libmedia-thumbnail.spec | 2 | ||||
| -rwxr-xr-x | src/ipc/media-thumb-ipc.c | 14 |
2 files changed, 13 insertions, 3 deletions
diff --git a/packaging/libmedia-thumbnail.spec b/packaging/libmedia-thumbnail.spec index 83e77e2..1750a0d 100644 --- a/packaging/libmedia-thumbnail.spec +++ b/packaging/libmedia-thumbnail.spec @@ -1,6 +1,6 @@ Name: libmedia-thumbnail Summary: Media thumbnail service library for multimedia applications. -Version: 0.1.83 +Version: 0.1.84 Release: 1 Group: utils License: Apache diff --git a/src/ipc/media-thumb-ipc.c b/src/ipc/media-thumb-ipc.c index 1c9648d..ef87e86 100755 --- a/src/ipc/media-thumb-ipc.c +++ b/src/ipc/media-thumb-ipc.c @@ -205,6 +205,16 @@ _media_thumb_recv_msg(int sock, int header_size, thumbMsg *msg) SAFE_FREE(buf); + if (!(msg->origin_path_size > 0 && msg->origin_path_size < MAX_PATH_SIZE)) { + thumb_err("origin path size is wrong [%d]", msg->origin_path_size); + return MEDIA_THUMB_ERROR_INVALID_PARAMETER; + } + + if (!(msg->dest_path_size > 0 && msg->dest_path_size < MAX_PATH_SIZE)) { + thumb_err("destination path size is wrong [%d]", msg->dest_path_size); + return MEDIA_THUMB_ERROR_INVALID_PARAMETER; + } + buf = (unsigned char*)malloc(msg->origin_path_size); if ((recv_msg_len = recv(sock, buf, msg->origin_path_size, 0)) < 0) { @@ -263,7 +273,7 @@ _media_thumb_recv_udp_msg(int sock, int header_size, thumbMsg *msg, struct socka if (msg->origin_path_size <= 0 || msg->origin_path_size > MAX_PATH_SIZE) { SAFE_FREE(buf); thumb_err("msg->origin_path_size is invalid %d", msg->origin_path_size ); - return MEDIA_THUMB_ERROR_NETWORK; + return MEDIA_THUMB_ERROR_INVALID_PARAMETER; } strncpy(msg->org_path, (char*)buf + header_size, msg->origin_path_size); @@ -272,7 +282,7 @@ _media_thumb_recv_udp_msg(int sock, int header_size, thumbMsg *msg, struct socka if (msg->dest_path_size <= 0 || msg->dest_path_size > MAX_PATH_SIZE) { SAFE_FREE(buf); thumb_err("msg->origin_path_size is invalid %d", msg->dest_path_size ); - return MEDIA_THUMB_ERROR_NETWORK; + return MEDIA_THUMB_ERROR_INVALID_PARAMETER; } strncpy(msg->dst_path, (char*)buf + header_size + msg->origin_path_size, msg->dest_path_size); |