Dan Carpenter f873142252 drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings ...

[ Upstream commit 156e0b1a81 ]

The dev_info.name[] array has space for RIO_MAX_DEVNAME_SZ + 1
characters.  But the problem here is that we don't ensure that the user
put a NUL terminator on the end of the string.  It could lead to an out
of bounds read.

Link: http://lkml.kernel.org/r/20190529110601.GB19119@mwanda
Fixes: e8de370188 ("rapidio: add mport char device driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Alexandre Bounine <alex.bou9@gmail.com>
Cc: Ira Weiny <ira.weiny@intel.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-08-06 19:06:52 +02:00

..

devices

drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings

2019-08-06 19:06:52 +02:00

switches

rapidio: constify rio_device_id

2017-11-17 16:10:03 -08:00

Kconfig

rapidio: add RapidIO channelized messaging driver

2016-08-02 19:35:31 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rio_cm.c

rapidio: fix a NULL pointer dereference when create_workqueue() fails

2019-06-15 11:53:59 +02:00

rio-access.c

rapidio: remove global irq spinlocks from the subsystem

2017-10-03 17:54:24 -07:00

rio-driver.c

rapidio: add shutdown notification for RapidIO devices

2016-03-22 15:36:02 -07:00

rio-scan.c

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

rio-sysfs.c

rapidio: use is_visible() to hide switch-specific attributes

2017-03-17 15:10:49 +09:00

rio.c

rapidio: move 12 EXPORT_SYMBOL_GPL() calls to function implementations

2018-02-06 18:32:46 -08:00

rio.h

rapidio: use is_visible() to hide switch-specific attributes

2017-03-17 15:10:49 +09:00