FatPkg EnhancedFatDxe: Use safe string functions

Unsafe string functions are replaced with safe ones.

Safe string functions will assert if DestMax is not greater than
StrnLenS(Source, DestMax). Therefore, additional assert for checking the
size of source and destination buffers can be removed.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Ruiyu Ni <ruiyu.ni@intel.com>
Reviewed-by: Jaben Carsey <jaben.carsey@intel.com>

(based on FatPkg commit 2cb92b4f19b096daf133d6501afa13e5a85062c5)

[jordan.l.justen@intel.com: Use script to relicense to 2-clause BSD]
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Jordan Justen <jordan.l.justen@intel.com>
Acked-by: Mark Doran <mark.doran@intel.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>

1 files changed, 7 insertions, 7 deletions

diff --git a/FatPkg/EnhancedFatDxe/FileName.c b/FatPkg/EnhancedFatDxe/FileName.c
index 09690fb076..551cda53b9 100644
--- a/FatPkg/EnhancedFatDxe/FileName.c
+++ b/FatPkg/EnhancedFatDxe/FileName.c
@@ -1,6 +1,6 @@
 /*++

 

-Copyright (c) 2005 - 2007, Intel Corporation. All rights reserved.<BR>

+Copyright (c) 2005 - 2015, Intel Corporation. All rights reserved.<BR>

 This program and the accompanying materials are licensed and made available

 under the terms and conditions of the BSD License which accompanies this

 distribution. The full text of the license may be found at

@@ -302,7 +302,6 @@ Returns:
   CHAR16  Buffer[FAT_MAIN_NAME_LEN + 1 + FAT_EXTEND_NAME_LEN + 1];

   UINT8   OutCaseFlag;

 

-  ASSERT (StrSize (Str) <= sizeof (Buffer));

   //

   // Assume the case of input string is mixed

   //

@@ -311,7 +310,7 @@ Returns:
   // Lower case a copy of the string, if it matches the

   // original then the string is lower case

   //

-  StrCpy (Buffer, Str);

+  StrCpyS (Buffer, sizeof (Buffer) / sizeof (Buffer[0]), Str);

   FatStrLwr (Buffer);

   if (StrCmp (Str, Buffer) == 0) {

     OutCaseFlag = InCaseFlag;

@@ -320,7 +319,7 @@ Returns:
   // Upper case a copy of the string, if it matches the

   // original then the string is upper case

   //

-  StrCpy (Buffer, Str);

+  StrCpyS (Buffer, sizeof (Buffer) / sizeof (Buffer[0]), Str);

   FatStrUpr (Buffer);

   if (StrCmp (Str, Buffer) == 0) {

     OutCaseFlag = 0;

@@ -392,8 +391,9 @@ Returns:
 

 VOID

 FatGetFileNameViaCaseFlag (

-  IN  FAT_DIRENT    *DirEnt,

-  OUT CHAR16        *FileString

+  IN     FAT_DIRENT   *DirEnt,

+  IN OUT CHAR16       *FileString,

+  IN     UINTN        FileStringMax

   )

 /*++

 

@@ -425,7 +425,7 @@ Returns:
   FatNameToStr (File8Dot3Name + FAT_MAIN_NAME_LEN, FAT_EXTEND_NAME_LEN, CaseFlag & FAT_CASE_EXT_LOWER, &TempExt[1]);

   if (TempExt[1] != 0) {

     TempExt[0] = L'.';

-    StrCat (FileString, TempExt);

+    StrCatS (FileString, FileStringMax, TempExt);

   }

 }