prevent out-of-bounds buffer writes in EnumLocalesParams

osl_getTextEncodingFromLocale()

In case of the Language code being longer than 2 characters the string
written to the struct EnumLocalesParams member was not 0-terminated if a
Country code was also given (consecutive fields in the struct) unless
the struct was packed in 4-byte alignment and luckily contained a 0 as
the 4th byte. The locale could not had been matched in these cases. In
case of a sufficiently long language or country argument the entire
EnumLocalesParams struct could had been overflown.

Change-Id: I1ec67ad0b3d12b0fa944d7e759bb5cb701842e39

0 files changed, 0 insertions, 0 deletions