mirror of
https://github.com/torvalds/linux
synced 2024-10-02 09:18:22 +00:00
ad0c6e367e
In dgrp_receive() there is: desclen = ((plen - 12) > MAX_DESC_LEN) ? MAX_DESC_LEN : plen - 12; strncpy(nd->nd_ps_desc, b + 12, desclen); However, it's possible for plen to be <= 12 here so we'd be passing a negative number into the strncpy(). Fix this to not make the strncpy call and report an error if desclen is <= 0 Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Bill Pemberton <wfp5p@virginia.edu> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|---|---|---|
| .. | ||
| dgrp_common.c | ||
| dgrp_common.h | ||
| dgrp_dpa_ops.c | ||
| dgrp_driver.c | ||
| dgrp_mon_ops.c | ||
| dgrp_net_ops.c | ||
| dgrp_ports_ops.c | ||
| dgrp_specproc.c | ||
| dgrp_sysfs.c | ||
| dgrp_tty.c | ||
| digirp.h | ||
| drp.h | ||
| Kconfig | ||
| Makefile | ||
| README | ||
| TODO | ||
The user space code to work with this driver is located at https://github.com/wfp5p/dgrp-utils