Mirrors_Framework/rt-thread
1
0
Fork 0
mirror of https://github.com/RT-Thread/rt-thread.git synced 2026-09-22 19:44:24 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

bsp: nxp: Bound VGLite buffer reader access

Browse Source 
Check the buffer limits before reading ptr[i] in bufferred_fgets(). Also guard CR/LF skipping against the available input bytes so reading a full buffer does not inspect one byte past the source.

Generated-by: OpenAI Codex
Signed-off-by: Old-Ding <35417409+Old-Ding@users.noreply.github.com>
This commit is contained in:
Old-Ding
2026-07-08 13:38:32 +08:00
committed by Rbb666
parent 221502ade0
commit 965fc8e992
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bsp/nxp/imx/imxrt/libraries/drivers/vglite/font/buf_reader.c
+3 -3
View File
@@ -190,7 +190,7 @@ char *bufferred_fgets(char* buff, int len, bufferred_reader_t *fd)
return NULL;
ptr = fd->data_buf + fd->index;
for(i=0; ptr[i] != '\0' && i < len; i++)
for(i=0; i < len && ptr[i] != '\0'; i++)
{
if ( ptr[i] == '\n' )
break;
@@ -201,9 +201,9 @@ char *bufferred_fgets(char* buff, int len, bufferred_reader_t *fd)
buff[i] = '\0';
j = i;
/* skip trailing newline from file buffer */
if ( ptr[i] == '\r' )
if ( i < valid_bytes && ptr[i] == '\r' )
i++;
if ( ptr[i] == '\n' )
if ( i < valid_bytes && ptr[i] == '\n' )
i++;
fd->index += i;