Andrey Ryabinin 179a5bc4b8 net/9p: use memcpy() instead of snprintf() in p9_mount_tag_show() ... p9_mount_tag_show() uses '%s' format string to print non-NULL terminated chan->tag string. This leads to out of bounds memory read, because format '%s' implies that string is NULL-terminated. The length of string is know here, so its simpler and safer to use memcpy instead of snprintf(). Signed-off-by: Andrey Ryabinin <a.ryabinin@samsung.com> Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr> Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>		2015-03-20 07:34:43 -07:00
..
client.c	9P: remove unnecessary break after return	2014-07-15 16:27:00 -07:00
error.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
Kconfig	net/9p: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:39:33 -08:00
Makefile	[net/9p] Preparation and helper functions for zero copy	2011-03-15 09:57:34 -05:00
mod.c	9p: Reduce object size with CONFIG_NET_9P_DEBUG	2012-01-05 10:51:44 -06:00
protocol.c	9p: use unsigned integers for nwqid/count	2015-03-20 07:34:42 -07:00
protocol.h	net/9p: Convert net/9p protocol dumps to tracepoints	2011-10-24 11:13:12 -05:00
trans_common.c	9p: fix off by one causing access violations and memory corruption	2013-07-11 11:36:02 -07:00
trans_common.h	fs/9p: Update zero-copy implementation in 9p	2011-10-24 11:13:11 -05:00
trans_fd.c	9p: remove unused variable in p9_fd_create()	2015-03-20 07:34:41 -07:00
trans_rdma.c	9pnet_rdma: check token type before int conversion	2014-03-25 16:38:19 -05:00
trans_virtio.c	net/9p: use memcpy() instead of snprintf() in p9_mount_tag_show()	2015-03-20 07:34:43 -07:00
util.c	net/9p: convert to idr_alloc()	2013-02-27 19:10:20 -08:00