commit 8c05a3c2c4cd5c3d1db709dba6380f74e4646944
author Zhou Song <zhous@codeaurora.org> Tue Jun 18 22:57:11 2019 +0800
committer Zhou Song <zhous@codeaurora.org> Tue Jun 18 22:57:11 2019 +0800
tree 304535184e7e9a280af4fe8dc4e20b311e56084e
parent f81da24f7075769684e1f2bf95babc6dffbaf82b

audio: usb: fix buffer overflow issue

Add terminated char before passing string to sscanf

Change-Id: Ib3017a89a3adfaf4e0703e800a434f0f8c1f7f44

hal/audio_extn/usb.c

diff --git a/hal/audio_extn/usb.c b/hal/audio_extn/usb.c
index e6859fe..911724a 100644
--- a/hal/audio_extn/usb.c
+++ b/hal/audio_extn/usb.c
@@ -395,6 +395,7 @@
         return -1;
     }
     memcpy(tmp, interval_str_start, eol-interval_str_start);
+    tmp[eol-interval_str_start] = '\0';
     sscanf(tmp, "%lu %2s", &interval, &time_unit[0]);
     if (!strcmp(time_unit, "us")) {
         multiplier = 1;