system/fastboot: Fix Out-of-bounds Write

JianyuWang0623 · JianyuWang0623 · commit cde41f48491e · 2024-09-10T20:35:56.000+08:00
CID 329130: (apache#3 of 3): 越界写入 (OVERRUN) 6. overrun-local: 在字节偏移 64 处使用索引 r（其值为 64）越界 64 字节访问数组 buffer Signed-off-by: wangjianyu3 <wangjianyu3@xiaomi.com>
diff --git a/system/fastboot/fastboot.c b/system/fastboot/fastboot.c
@@ -847,7 +847,7 @@ static void fastboot_command_loop(FAR struct fastboot_ctx_s *context)
 
   while (1)
     {
-      char buffer[FASTBOOT_MSG_LEN];
+      char buffer[FASTBOOT_MSG_LEN + 1];
       size_t ncmds = nitems(g_fast_cmd);
       size_t index;
 

Original file line number	Diff line number	Diff line change
`@@ -847,7 +847,7 @@ static void fastboot_command_loop(FAR struct fastboot_ctx_s *context)`
`847`	`847`
`848`	`848`	`while (1)`
`849`	`849`	`{`
`850`		`- char buffer[FASTBOOT_MSG_LEN];`
	`850`	`+ char buffer[FASTBOOT_MSG_LEN + 1];`
`851`	`851`	`size_t ncmds = nitems(g_fast_cmd);`
`852`	`852`	`size_t index;`
`853`	`853`