mirror of
https://github.com/torvalds/linux.git
synced 2025-11-07 03:59:22 +02:00
The dev_info.name[] array has space for RIO_MAX_DEVNAME_SZ + 1
characters. But the problem here is that we don't ensure that the user
put a NUL terminator on the end of the string. It could lead to an out
of bounds read.
Link: http://lkml.kernel.org/r/20190529110601.GB19119@mwanda
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| rio_mport_cdev.c | ||
| tsi721.c | ||
| tsi721.h | ||
| tsi721_dma.c | ||