This is an automated email from the ASF dual-hosted git repository.
xiaoxiang781216 pushed a commit to branch releases/13.0
in repository https://gitbox.apache.org/repos/asf/nuttx.git
The following commit(s) were added to refs/heads/releases/13.0 by this push:
new 8c8fc40c612 drivers: wireless: bound GS2200M sscanf fields
8c8fc40c612 is described below
commit 8c8fc40c612e1d50bced8d00c9ef043b03709d43
Author: Old-Ding <[email protected]>
AuthorDate: Mon Jul 6 06:29:37 2026 +0800
drivers: wireless: bound GS2200M sscanf fields
GS2200M response parsing copies device-provided text fields into fixed-size
local buffers.
Add field widths to the sscanf string conversions so the parsed address,
port, and command fields stay within their destination arrays.
Signed-off-by: Old-Ding <[email protected]>
---
drivers/wireless/gs2200m.c | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/drivers/wireless/gs2200m.c b/drivers/wireless/gs2200m.c
index 94ed0400e2b..59d9a9c94ae 100644
--- a/drivers/wireless/gs2200m.c
+++ b/drivers/wireless/gs2200m.c
@@ -1270,7 +1270,7 @@ static void _parse_pkt_in_s4(FAR struct pkt_ctx_s
*pkt_ctx,
memset(addr, 0, sizeof(addr));
memset(port, 0, sizeof(port));
- n = sscanf((FAR const char *)pkt_ctx->ptr, "%s %s\t", addr, port);
+ n = sscanf((FAR const char *)pkt_ctx->ptr, "%16s %5s\t", addr, port);
ASSERT(2 == n);
wlinfo("from (%s:%s)\n", addr, port);
@@ -1716,7 +1716,7 @@ static enum pkt_type_e gs2200m_join_network(FAR struct
gs2200m_dev_s *dev,
ASSERT(3 == pkt_dat.n);
n = sscanf(pkt_dat.msg[1] + 1,
- " %[^:]:%[^:]:%[^ ]",
+ " %16[^:]:%16[^:]:%16[^ ]",
addr[0], addr[1], addr[2]);
ASSERT(3 == n);
@@ -2793,7 +2793,7 @@ static int gs2200m_ioctl_iwreq(FAR struct gs2200m_dev_s
*dev,
goto errout;
}
- n = sscanf(pkt_dat.msg[2], "BSSID=%c:%c:%c:%c:%c:%c %s",
+ n = sscanf(pkt_dat.msg[2], "BSSID=%c:%c:%c:%c:%c:%c %63s",
&res->u.ap_addr.sa_data[0], &res->u.ap_addr.sa_data[1],
&res->u.ap_addr.sa_data[2], &res->u.ap_addr.sa_data[3],
&res->u.ap_addr.sa_data[4], &res->u.ap_addr.sa_data[5],
@@ -2812,7 +2812,7 @@ static int gs2200m_ioctl_iwreq(FAR struct gs2200m_dev_s
*dev,
goto errout;
}
- n = sscanf(pkt_dat.msg[2], "%s CHANNEL=%" SCNd32 " %s",
+ n = sscanf(pkt_dat.msg[2], "%63s CHANNEL=%" SCNd32 " %63s",
cmd, &res->u.freq.m, cmd2);
ASSERT(3 == n);
wlinfo("CHANNEL:%" PRId32 "\n", res->u.freq.m);
