Michel2/Tasmota
1
0
Fork 0
mirror of https://github.com/arendst/Tasmota.git synced 2026-07-27 20:05:46 +00:00
Code Issues Releases Activity

Fix scripter buffer overflow

Browse Source
This commit is contained in:
Theo Arends
2026-05-16 22:54:45 +02:00
parent 007e7b940c
commit 5009bea30b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino
+2 -2
View File
@@ -2770,7 +2770,7 @@ int32_t fetch_jpg(uint32_t sel, char *url, uint32_t xp, uint32_t yp, uint32_t sc
String boundary = glob_script_mem.jpg_task.http.header(headerKeys[0]);
char *cp = strchr(boundary.c_str(), '=');
if (cp) {
strcpy(glob_script_mem.jpg_task.boundary,cp + 1);
strlcpy(glob_script_mem.jpg_task.boundary, cp + 1, sizeof(glob_script_mem.jpg_task.boundary));
}
} else {
AddLog(LOG_LEVEL_INFO,PSTR("SCR: HTTP error %d = %s"), httpCode, glob_script_mem.jpg_task.http.errorToString(httpCode).c_str());
@@ -2806,7 +2806,7 @@ int32_t fetch_jpg(uint32_t sel, char *url, uint32_t xp, uint32_t yp, uint32_t sc
glob_script_mem.jpg_task.stream.readBytesUntil('\n', inbuff, sizeof(inbuff));
//AddLog(LOG_LEVEL_INFO, PSTR("size = %s"), inbuff);
char *cp = strchr(inbuff, ':');
uint16_t size = 0;
uint32_t size = 0;
if (cp) {
size = atoi(cp + 1);
}