Dan Carpenter 29d2ceabec drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings ... [ Upstream commit 156e0b1a81 ] The dev_info.name[] array has space for RIO_MAX_DEVNAME_SZ + 1 characters. But the problem here is that we don't ensure that the user put a NUL terminator on the end of the string. It could lead to an out of bounds read. Link: http://lkml.kernel.org/r/20190529110601.GB19119@mwanda Fixes: e8de370188 ("rapidio: add mport char device driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Alexandre Bounine <alex.bou9@gmail.com> Cc: Ira Weiny <ira.weiny@intel.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-08-06 19:05:24 +02:00
..
devices	drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings	2019-08-06 19:05:24 +02:00
switches
Kconfig
Makefile
rio-access.c
rio-driver.c
rio-scan.c
rio-sysfs.c
rio.c
rio.h
rio_cm.c	rapidio: fix a NULL pointer dereference when create_workqueue() fails	2019-06-15 11:54:50 +02:00