From ea8a958a95bf5e22f8d705c5e82715a79249f488 Mon Sep 17 00:00:00 2001 From: Chris Johns Date: Tue, 22 Jun 2010 02:03:36 +0000 Subject: 2010-06-22 Chris Johns * startup/m68k-stub.c: PR 1539. Fix buffer overrun. --- c/src/lib/libbsp/m68k/ods68302/ChangeLog | 4 ++++ c/src/lib/libbsp/m68k/ods68302/startup/m68k-stub.c | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) (limited to 'c/src/lib/libbsp/m68k/ods68302') diff --git a/c/src/lib/libbsp/m68k/ods68302/ChangeLog b/c/src/lib/libbsp/m68k/ods68302/ChangeLog index 9929c0c535..53907af9f7 100644 --- a/c/src/lib/libbsp/m68k/ods68302/ChangeLog +++ b/c/src/lib/libbsp/m68k/ods68302/ChangeLog @@ -1,3 +1,7 @@ +2010-06-22 Chris Johns + + * startup/m68k-stub.c: PR 1539. Fix buffer overrun. + 2010-04-30 Joel Sherrill * include/bsp.h: Add BSP_SMALL_MEMORY. diff --git a/c/src/lib/libbsp/m68k/ods68302/startup/m68k-stub.c b/c/src/lib/libbsp/m68k/ods68302/startup/m68k-stub.c index 0d0e6f208a..1560c6c0f9 100644 --- a/c/src/lib/libbsp/m68k/ods68302/startup/m68k-stub.c +++ b/c/src/lib/libbsp/m68k/ods68302/startup/m68k-stub.c @@ -601,7 +601,7 @@ void getpacket(char *buffer) count = 0; /* now, read until a # or end of buffer is found */ - while (count < BUFMAX) { + while (count < (BUFMAX - 1)) { ch = getDebugChar() & 0x7f; if (ch == '#') break; checksum = checksum + ch; -- cgit v1.2.3