commit 73f568cee9f8eee4d4eedecc92f97b4cbb7cb002
author claireho <chinglanho@gmail.com> Tue Feb 28 14:39:58 2012 -0800
committer claireho <chinglanho@gmail.com> Tue Feb 28 15:07:59 2012 -0800
tree 818f573ddddd6e52e4156fdb215965b9bb6c2db0
parent 50e1caec409ecc3792508ed012fcbbdf1130d452

Fix buffer overflow in uresopen.c

Bug: 6061535 - A security bug reported against Chrome.

Change-Id: If10434bf1c760da3e1713ef4b97b9a41ef979716

common/uresbund.c

diff --git a/common/uresbund.c b/common/uresbund.c
index e3eefb1..cd671a4 100644
--- a/common/uresbund.c
+++ b/common/uresbund.c
@@ -319,7 +319,10 @@
     UResourceDataEntry *r = NULL;
     UResourceDataEntry find;
     /*int32_t hashValue;*/
-    char name[96];
+    /* BEGIN android-changed
+       Security bug : http://b/issue?id=6061535 */
+    char name[100];
+    /* END android-changed */
     char aliasName[100] = { 0 };
     int32_t aliasLen = 0;
     /*UBool isAlias = FALSE;*/
@@ -528,8 +531,11 @@
     UBool hasChopped = TRUE;
     UBool usingUSRData = U_USE_USRDATA && ( path == NULL || uprv_strncmp(path,U_ICUDATA_NAME,8) == 0);
 
-    char name[96];
-    char usrDataPath[96];
+    /* BEGIN android-changed
+       Security bug : http://b/issue?id=6061535  */
+    char name[100];
+    char usrDataPath[100];
+    /* END android-changed */
 
     initCache(status);