Staging: iio-utils: fix memory overflow for dynamically allocateded memory to hold filename

Signed-off-by: Barry Song <21cnbao@gmail.com>
Acked-by: Jonathan Cameron <jic23@cam.ac.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

1 files changed, 1 insertions, 2 deletions

diff --git a/drivers/staging/iio/Documentation/iio_utils.h b/drivers/staging/iio/Documentation/iio_utils.h
index a4555e6f133f..014f6684faba 100644
--- a/drivers/staging/iio/Documentation/iio_utils.h
+++ b/drivers/staging/iio/Documentation/iio_utils.h
@@ -62,9 +62,8 @@ inline int find_type_by_name(const char *name, const char *type)
                                         1) != 0) {
                                 filename = malloc(strlen(iio_dir)
                                                 + strlen(type)
-                                                + 1
                                                 + numstrlen
-                                                + 1);
+                                                + 6);
                                 if (filename == NULL)
                                         return -ENOMEM;
                                 sprintf(filename, "%s%s%d/name",