From 9cf28bc529684d58f4b61a7637f16879098cbcc4 Mon Sep 17 00:00:00 2001 From: Richard Zhao Date: Fri, 10 Jul 2015 17:02:58 -0700 Subject: gpu: nvgpu: fix memory corrupt replace sprinf with snprintf in func gk20a_channel_syncpt_create. sync point name can be long. Bug 1638853 Change-Id: Ie305d04edfbb299c8b1241eca52101439bb4a6c6 Signed-off-by: Richard Zhao Reviewed-on: http://git-master/r/769113 Reviewed-on: http://git-master/r/776424 Reviewed-by: Automatic_Commit_Validation_User Reviewed-by: Aingara Paramakuru GVS: Gerrit_Virtual_Submit Reviewed-by: Vladislav Buzov --- drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'drivers') diff --git a/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c b/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c index 09814568..7f70d347 100644 --- a/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c +++ b/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c @@ -313,7 +313,7 @@ static struct gk20a_channel_sync * gk20a_channel_syncpt_create(struct channel_gk20a *c) { struct gk20a_channel_syncpt *sp; - char syncpt_name[16]; + char syncpt_name[32]; sp = kzalloc(sizeof(*sp), GFP_KERNEL); if (!sp) @@ -322,7 +322,8 @@ gk20a_channel_syncpt_create(struct channel_gk20a *c) sp->c = c; sp->host1x_pdev = c->g->host1x_dev; - sprintf(syncpt_name, "%s_%d", dev_name(&c->g->dev->dev), c->hw_chid); + snprintf(syncpt_name, sizeof(syncpt_name), + "%s_%d", dev_name(&c->g->dev->dev), c->hw_chid); sp->id = nvhost_get_syncpt_host_managed(sp->host1x_pdev, c->hw_chid, syncpt_name); -- cgit v1.2.2