From: Markus Burri Date: Thu, 8 May 2025 13:06:08 +0000 (+0200) Subject: accel/ivpu: Use effective buffer size for zero terminator X-Git-Tag: v6.15-rc7~11^2~1^2~1 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2f0c6fceae0df59a9c0edb5d41529b90ee9f2fcb;p=thirdparty%2Fkernel%2Flinux.git accel/ivpu: Use effective buffer size for zero terminator Use the effective written size instead of original size as index for zero termination. If the input from user-space is to larger and the input is truncated, the original size is out-of-bound. Since there is an upfront size check here, the change is for consistency. Signed-off-by: Markus Burri Reviewed-by: Jacek Lawrynowicz Signed-off-by: Jacek Lawrynowicz Link: https://lore.kernel.org/r/20250508130612.82270-3-markus.burri@mt.com --- diff --git a/drivers/accel/ivpu/ivpu_debugfs.c b/drivers/accel/ivpu/ivpu_debugfs.c index f0dad0c9ce338..cd24ccd20ba6c 100644 --- a/drivers/accel/ivpu/ivpu_debugfs.c +++ b/drivers/accel/ivpu/ivpu_debugfs.c @@ -455,7 +455,7 @@ priority_bands_fops_write(struct file *file, const char __user *user_buf, size_t if (ret < 0) return ret; - buf[size] = '\0'; + buf[ret] = '\0'; ret = sscanf(buf, "%u %u %u %u", &band, &grace_period, &process_grace_period, &process_quantum); if (ret != 4)