# HG changeset patch
# User ib
# Date 1297619882 0
# Node ID b34b8e47a84485e6ed1deef323775c01847e5df5
# Parent  9d5519459be80f9ef5693c49c655efe4f872c951
Prevent out buffer overflow.

diff -r 9d5519459be8 -r b34b8e47a844 gui/skin/cut.c
--- a/gui/skin/cut.c	Sat Feb 12 23:58:50 2011 +0000
+++ b/gui/skin/cut.c	Sun Feb 13 17:58:02 2011 +0000
@@ -21,16 +21,19 @@
 
 #include "cut.h"
 
-void cutItem( char * in,char * out,char sep,int num )
+void cutItemString( char * in,char * out,char sep,int num,size_t maxout )
 {
  int i,n,c;
  for ( c=0,n=0,i=0;i<strlen( in );i++ )
   {
    if ( in[i] == sep ) n++;
-   if ( n >= num && in[i] != sep ) out[c++]=in[i];
-   if ( n >= num && in[i+1] == sep ) { out[c]=0; return; }
+   if ( n >= num && in[i] != sep )
+   {
+     if ( c + 1 < maxout ) out[c++] = in[i];
+   }
+   if ( n >= num && in[i+1] == sep ) break;
   }
- out[c]=0;
+  if ( c < maxout ) out[c] = '\0';
 }
 
 int cutItemToInt( char * in,char sep,int num )
diff -r 9d5519459be8 -r b34b8e47a844 gui/skin/cut.h
--- a/gui/skin/cut.h	Sat Feb 12 23:58:50 2011 +0000
+++ b/gui/skin/cut.h	Sun Feb 13 17:58:02 2011 +0000
@@ -19,7 +19,11 @@
 #ifndef MPLAYER_GUI_CUT_H
 #define MPLAYER_GUI_CUT_H
 
-void  cutItem( char * in, char * out, char sep, int num );
+#include <stddef.h>
+
+#define cutItem(in, out, sep, num) cutItemString(in, out, sep, num, sizeof(out))
+
+void  cutItemString( char * in, char * out, char sep, int num, size_t maxout );
 int   cutItemToInt( char * in, char sep, int num );
 float cutItemToFloat( char * in, char sep, int num );
 void  cutChunk( char * in, char * s1 );