aboutsummaryrefslogtreecommitdiff
path: root/hw
diff options
context:
space:
mode:
authorPeter Xu <peterx@redhat.com>2016-03-10 10:35:24 +0800
committerGerd Hoffmann <kraxel@redhat.com>2016-03-18 13:55:16 +0100
commite3d60bc7c6f26b889686ab91f7062f6a79df2494 (patch)
treeb57f43562e9835b17c2197629c007a33aaf8031d /hw
parent182b391e797508deba9704cf580325e99260d8c8 (diff)
downloadqemu-e3d60bc7c6f26b889686ab91f7062f6a79df2494.zip
qemu-e3d60bc7c6f26b889686ab91f7062f6a79df2494.tar.gz
qemu-e3d60bc7c6f26b889686ab91f7062f6a79df2494.tar.bz2
usb: fix unbound stack usage for usb_mtp_add_str
Use heap instead of stack. Signed-off-by: Peter Xu <peterx@redhat.com> Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Diffstat (limited to 'hw')
-rw-r--r--hw/usb/dev-mtp.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/hw/usb/dev-mtp.c b/hw/usb/dev-mtp.c
index 7391783..62fb7cd 100644
--- a/hw/usb/dev-mtp.c
+++ b/hw/usb/dev-mtp.c
@@ -718,7 +718,7 @@ static void usb_mtp_add_wstr(MTPData *data, const wchar_t *str)
static void usb_mtp_add_str(MTPData *data, const char *str)
{
uint32_t len = strlen(str)+1;
- wchar_t wstr[len];
+ wchar_t *wstr = g_new(wchar_t, len);
size_t ret;
ret = mbstowcs(wstr, str, len);
@@ -727,6 +727,8 @@ static void usb_mtp_add_str(MTPData *data, const char *str)
} else {
usb_mtp_add_wstr(data, wstr);
}
+
+ g_free(wstr);
}
static void usb_mtp_add_time(MTPData *data, time_t time)