mtd: terminate user-provided string
Noticed by Coverity as a potential security issue. Signed-off-by: Brian Norris <computersforpeace@gmail.com>
This commit is contained in:
Родитель
537ab1bd47
Коммит
1cc8d84133
|
@ -549,6 +549,9 @@ static int mtdchar_blkpg_ioctl(struct mtd_info *mtd,
|
||||||
if (mtd_is_partition(mtd))
|
if (mtd_is_partition(mtd))
|
||||||
return -EINVAL;
|
return -EINVAL;
|
||||||
|
|
||||||
|
/* Sanitize user input */
|
||||||
|
p.devname[BLKPG_DEVNAMELTH - 1] = '\0';
|
||||||
|
|
||||||
return mtd_add_partition(mtd, p.devname, p.start, p.length);
|
return mtd_add_partition(mtd, p.devname, p.start, p.length);
|
||||||
|
|
||||||
case BLKPG_DEL_PARTITION:
|
case BLKPG_DEL_PARTITION:
|
||||||
|
|
Загрузка…
Ссылка в новой задаче