Function 'sprintf' has potential buffer overflow risk. This patch use 'sprintf_s' to improve the code. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Qiu Shumin <shumin.qiu@intel.com> Reviewed-by: Yao Jiewen <Jiewen.Yao@intel.com> Reviewed-by: Cinnamon Shia <cinnamon.shia@hpe.com> Reviewed-by: Samer El-Haj-Mahmoud <elhaj@hpe.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@19582 6f19259b-4bc3-4df7-8a09-765794883524
		
			
				
	
	
		
			103 lines
		
	
	
		
			3.8 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			103 lines
		
	
	
		
			3.8 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /**********************************************************************
 | |
|   regposerr.c - Oniguruma (regular expression library)
 | |
| **********************************************************************/
 | |
| /*-
 | |
|  * Copyright (c) 2002-2007  K.Kosako  <sndgk393 AT ybb DOT ne DOT jp>
 | |
|  * All rights reserved.
 | |
|  *
 | |
|  * (C) Copyright 2015 Hewlett Packard Enterprise Development LP<BR>
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without
 | |
|  * modification, are permitted provided that the following conditions
 | |
|  * are met:
 | |
|  * 1. Redistributions of source code must retain the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer.
 | |
|  * 2. Redistributions in binary form must reproduce the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer in the
 | |
|  *    documentation and/or other materials provided with the distribution.
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 | |
|  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 | |
|  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 | |
|  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 | |
|  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 | |
|  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 | |
|  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 | |
|  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 | |
|  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 | |
|  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 | |
|  * SUCH DAMAGE.
 | |
|  */
 | |
| 
 | |
| /*#include "config.h"*/
 | |
| #include "onigposix.h"
 | |
| 
 | |
| #if 0
 | |
| #ifdef HAVE_STRING_H
 | |
| # include <string.h>
 | |
| #else
 | |
| # include <strings.h>
 | |
| #endif
 | |
| #endif
 | |
| 
 | |
| #if defined(__GNUC__)
 | |
| #  define ARG_UNUSED  __attribute__ ((unused))
 | |
| #else
 | |
| #  define ARG_UNUSED
 | |
| #endif
 | |
| 
 | |
| static char* ESTRING[] = {
 | |
|   NULL,
 | |
|   "failed to match",                         /* REG_NOMATCH    */
 | |
|   "Invalid regular expression",              /* REG_BADPAT     */
 | |
|   "invalid collating element referenced",    /* REG_ECOLLATE   */
 | |
|   "invalid character class type referenced", /* REG_ECTYPE     */
 | |
|   "bad backslash-escape sequence",           /* REG_EESCAPE    */
 | |
|   "invalid back reference number",           /* REG_ESUBREG    */
 | |
|   "imbalanced [ and ]",                      /* REG_EBRACK     */
 | |
|   "imbalanced ( and )",                      /* REG_EPAREN     */
 | |
|   "imbalanced { and }",                      /* REG_EBRACE     */
 | |
|   "invalid repeat range {n,m}",              /* REG_BADBR      */
 | |
|   "invalid range",                           /* REG_ERANGE     */
 | |
|   "Out of memory",                           /* REG_ESPACE     */
 | |
|   "? * + not preceded by valid regular expression", /* REG_BADRPT   */
 | |
| 
 | |
|   /* Extended errors */
 | |
|   "internal error",                          /* REG_EONIG_INTERNAL */
 | |
|   "invalid wide char value",                 /* REG_EONIG_BADWC    */
 | |
|   "invalid argument",                        /* REG_EONIG_BADARG   */
 | |
|   "multi-thread error"                       /* REG_EONIG_THREAD   */
 | |
| };
 | |
| 
 | |
| //#include <stdio.h>
 | |
| 
 | |
| 
 | |
| extern size_t
 | |
| regerror(int posix_ecode, const regex_t* reg ARG_UNUSED, char* buf,
 | |
| 	 size_t size)
 | |
| {
 | |
|   char* s;
 | |
|   char tbuf[35];
 | |
|   size_t len;
 | |
| 
 | |
|   if (posix_ecode > 0
 | |
|       && posix_ecode < (int )(sizeof(ESTRING) / sizeof(ESTRING[0]))) {
 | |
|     s = ESTRING[posix_ecode];
 | |
|   }
 | |
|   else if (posix_ecode == 0) {
 | |
|     s = "";
 | |
|   }
 | |
|   else {
 | |
|     sprintf_s(tbuf, sizeof(tbuf), "undefined error code (%d)", posix_ecode);
 | |
|     s = tbuf;
 | |
|   }
 | |
| 
 | |
|   len = strlen_s(s, MAX_STRING_SIZE) + 1; /* use strlen() because s is ascii encoding. */
 | |
| 
 | |
|   if (buf != NULL && size > 0) {
 | |
|     strncpy_s(buf, size, s, size - 1);
 | |
|     buf[size - 1] = '\0';
 | |
|   }
 | |
|   return len;
 | |
| }
 |