]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
mei: bus: fix possible boundaries violation
authorAlexander Usyskin <alexander.usyskin@intel.com>
Mon, 25 Aug 2014 13:46:53 +0000 (16:46 +0300)
committerJiri Slaby <jslaby@suse.cz>
Fri, 31 Oct 2014 14:11:16 +0000 (15:11 +0100)
commit cfda2794b5afe7ce64ee9605c64bef0e56a48125 upstream.

function 'strncpy' will fill whole buffer 'id.name' of fixed size (32)
with string value and will not leave place for NULL-terminator.
Possible buffer boundaries violation in following string operations.
Replace strncpy with strlcpy.

Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
drivers/misc/mei/bus.c

index cd2033cd7120d7631fa8d345409ed9ea86259799..72b682379611a8d029b8d262125e854eebb60b95 100644 (file)
@@ -71,7 +71,7 @@ static int mei_cl_device_probe(struct device *dev)
 
        dev_dbg(dev, "Device probe\n");
 
-       strncpy(id.name, dev_name(dev), sizeof(id.name));
+       strlcpy(id.name, dev_name(dev), sizeof(id.name));
 
        return driver->probe(device, &id);
 }