commit 085e63d064620c763a62406a5ff4299bcee1838e
author Jin Qian <jinqian@google.com> Mon Apr 17 16:13:20 2017 -0700
committer Jin Qian <jinqian@google.com> Mon Apr 17 16:16:47 2017 -0700
tree d38669c8efcbe96644d112e510da07785c0853d9
parent dd62d63cd1b2ef5fd484306b2426c38680e8467a

libblkid: fix buffer overflow scanning partition name

If "line" is carefully crafted, sscanf will write 1 byte over ptname.

Bug: 36103037
Change-Id: Ia19e032d7c65edc27373ebccc0a5569f0fa31161

lib/blkid/devname.c

diff --git a/lib/blkid/devname.c b/lib/blkid/devname.c
index 3e2efa9..58baa29 100644
--- a/lib/blkid/devname.c
+++ b/lib/blkid/devname.c
@@ -394,7 +394,7 @@
 {
 	FILE *proc;
 	char line[1024];
-	char ptname0[128], ptname1[128], *ptname = 0;
+	char ptname0[129], ptname1[129], *ptname = 0;
 	char *ptnames[2];
 	dev_t devs[2];
 	int ma, mi;