mtd: terminate user-provided string
Noticed by Coverity as a potential security issue. Signed-off-by: Brian Norris <computersforpeace@gmail.com>
This commit is contained in:
Родитель
537ab1bd47
Коммит
1cc8d84133
|
@ -549,6 +549,9 @@ static int mtdchar_blkpg_ioctl(struct mtd_info *mtd,
|
|||
if (mtd_is_partition(mtd))
|
||||
return -EINVAL;
|
||||
|
||||
/* Sanitize user input */
|
||||
p.devname[BLKPG_DEVNAMELTH - 1] = '\0';
|
||||
|
||||
return mtd_add_partition(mtd, p.devname, p.start, p.length);
|
||||
|
||||
case BLKPG_DEL_PARTITION:
|
||||
|
|
Загрузка…
Ссылка в новой задаче