[TD-225]fix potential overflow in char array.

11ace7f5 · Haojun Liao · 9017b178 · 11ace7f5
隐藏空白更改
内联并排

Showing with 1 addition and 1 deletion

src/client/src/tscSQLParser.c src/client/src/tscSQLParser.c +1 -1

未找到文件。
--- a/src/client/src/tscSQLParser.c
+++ b/src/client/src/tscSQLParser.c
@@ -6084,7 +6084,7 @@ void tscPrintSelectClause(SSqlObj* pSql, int32_t subClauseIndex) {
    int32_t tmpLen = 0;
    tmpLen =
        sprintf(tmpBuf, "%s(uid:%" PRId64 ", %d)", aAggs[pExpr->functionId].aName, pExpr->uid, pExpr->colInfo.colId);
-    if (tmpLen + offset > totalBufSize) break;
+    if (tmpLen + offset + 1 >= totalBufSize) break;

    offset += sprintf(str + offset, "%s", tmpBuf);