mirror of
https://gitlab.freedesktop.org/cairo/cairo.git
synced 2025-12-20 14:00:10 +01:00
The strlen() could go past the n bytes and into a memory address we don't have read access to.
61 lines
1.8 KiB
C
61 lines
1.8 KiB
C
/* cairo - a vector graphics library with display and print output
|
|
*
|
|
* Copyright © 2006 Red Hat, Inc.
|
|
* Copyright © 2011 Andrea Canciani
|
|
*
|
|
* Permission to use, copy, modify, distribute, and sell this software
|
|
* and its documentation for any purpose is hereby granted without
|
|
* fee, provided that the above copyright notice appear in all copies
|
|
* and that both that copyright notice and this permission notice
|
|
* appear in supporting documentation, and that the name of the
|
|
* copyright holders not be used in advertising or publicity
|
|
* pertaining to distribution of the software without specific,
|
|
* written prior permission. The copyright holders make no
|
|
* representations about the suitability of this software for any
|
|
* purpose. It is provided "as is" without express or implied
|
|
* warranty.
|
|
*
|
|
* THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS
|
|
* SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
|
|
* FITNESS, IN NO EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY
|
|
* SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN
|
|
* AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
|
|
* OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
|
|
* SOFTWARE.
|
|
*
|
|
* Authors: Carl Worth <cworth@cworth.org>
|
|
* Andrea Canciani <ranma42@gmail.com>
|
|
*/
|
|
|
|
#include "cairo-missing.h"
|
|
|
|
#ifndef HAVE_STRNDUP
|
|
#include "cairo-malloc-private.h"
|
|
|
|
char *
|
|
strndup (const char *s,
|
|
size_t n)
|
|
{
|
|
const char *end;
|
|
size_t len;
|
|
char *sdup;
|
|
|
|
if (s == NULL)
|
|
return NULL;
|
|
|
|
end = memchr (s, 0, n);
|
|
if (end)
|
|
len = end - s;
|
|
else
|
|
len = n;
|
|
|
|
sdup = (char *) _cairo_malloc (len + 1);
|
|
if (sdup != NULL) {
|
|
memcpy (sdup, s, len);
|
|
sdup[len] = '\0';
|
|
}
|
|
|
|
return sdup;
|
|
}
|
|
#endif
|