linux-stable/drivers/scsi/qedf
Kees Cook cd22874fec scsi: qedf: Avoid reading past end of buffer
Using memcpy() from a string that is shorter than the length copied
means the destination buffer is being filled with arbitrary data from
the kernel rodata segment. Instead, use strncpy() which will fill the
trailing bytes with zeros.

This was found with the future CONFIG_FORTIFY_SOURCE feature.

Cc: Daniel Micay <danielmicay@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Chad Dupuis <chad.dupuis@cavium.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
2017-05-08 22:07:48 -04:00
..
drv_fcoe_fw_funcs.c qedf: fix wrong le16 conversion 2017-03-23 11:56:08 -07:00
drv_fcoe_fw_funcs.h qed*: Utilize Firmware 8.15.3.0 2017-03-13 15:33:09 -07:00
drv_scsi_fw_funcs.c qed*: Utilize Firmware 8.15.3.0 2017-03-13 15:33:09 -07:00
drv_scsi_fw_funcs.h qed*: Utilize Firmware 8.15.3.0 2017-03-13 15:33:09 -07:00
Kconfig
Makefile qed*: Utilize Firmware 8.15.3.0 2017-03-13 15:33:09 -07:00
qedf.h scsi: qedf: Cleanup the type of io_log->op 2017-05-08 21:51:39 -04:00
qedf_attr.c
qedf_dbg.c
qedf_dbg.h scsi: qedf: Fix defective logging format and argument mismatches 2017-03-06 22:38:52 -05:00
qedf_debugfs.c scsi: qedi: qedf: Use designated initializers 2017-04-19 22:10:25 -04:00
qedf_els.c scsi: qedf: properly update arguments position in function call 2017-05-08 21:48:31 -04:00
qedf_fip.c scsi: qedf: Fix crash due to unsolicited FIP VLAN response. 2017-04-07 17:07:15 -04:00
qedf_hsi.h
qedf_io.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2017-03-15 11:59:10 -07:00
qedf_main.c scsi: qedf: Avoid reading past end of buffer 2017-05-08 22:07:48 -04:00
qedf_version.h