mirror of
https://github.com/torvalds/linux.git
synced 2024-11-11 06:31:49 +00:00
156e0b1a81
The dev_info.name[] array has space for RIO_MAX_DEVNAME_SZ + 1
characters. But the problem here is that we don't ensure that the user
put a NUL terminator on the end of the string. It could lead to an out
of bounds read.
Link: http://lkml.kernel.org/r/20190529110601.GB19119@mwanda
Fixes:
|
||
---|---|---|
.. | ||
devices | ||
switches | ||
Kconfig | ||
Makefile | ||
rio_cm.c | ||
rio-access.c | ||
rio-driver.c | ||
rio-scan.c | ||
rio-sysfs.c | ||
rio.c | ||
rio.h |