diff options
| author | Brian Norris <computersforpeace@gmail.com> | 2014-07-21 22:08:13 -0400 |
|---|---|---|
| committer | Brian Norris <computersforpeace@gmail.com> | 2014-08-19 14:53:09 -0400 |
| commit | 1cc8d8413327a684cd5e93cd52ececb0223bb40b (patch) | |
| tree | c7d135bdbd80f8c84bfd29a0413f4d10ad1cfc6c /drivers/mtd/mtdchar.c | |
| parent | 537ab1bd47d6518e8a40207a80dd0c2c4bc43aed (diff) | |
mtd: terminate user-provided string
Noticed by Coverity as a potential security issue.
Signed-off-by: Brian Norris <computersforpeace@gmail.com>
Diffstat (limited to 'drivers/mtd/mtdchar.c')
| -rw-r--r-- | drivers/mtd/mtdchar.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/mtd/mtdchar.c b/drivers/mtd/mtdchar.c index a0f54e80670c..53563955931b 100644 --- a/drivers/mtd/mtdchar.c +++ b/drivers/mtd/mtdchar.c | |||
| @@ -549,6 +549,9 @@ static int mtdchar_blkpg_ioctl(struct mtd_info *mtd, | |||
| 549 | if (mtd_is_partition(mtd)) | 549 | if (mtd_is_partition(mtd)) |
| 550 | return -EINVAL; | 550 | return -EINVAL; |
| 551 | 551 | ||
| 552 | /* Sanitize user input */ | ||
| 553 | p.devname[BLKPG_DEVNAMELTH - 1] = '\0'; | ||
| 554 | |||
| 552 | return mtd_add_partition(mtd, p.devname, p.start, p.length); | 555 | return mtd_add_partition(mtd, p.devname, p.start, p.length); |
| 553 | 556 | ||
| 554 | case BLKPG_DEL_PARTITION: | 557 | case BLKPG_DEL_PARTITION: |