diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2019-05-22 11:45:13 +0300 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2019-05-22 17:22:14 -0700 |
commit | ccfb62f27beb295103e9392462b20a6ed807d0ea (patch) | |
tree | c00adc85e6999f71e4042645ce08d1af495f4f83 /fs/binfmt_elf.c | |
parent | c1e85c6ce57ef1eb73966152993a341c8123a8ea (diff) |
mISDN: make sure device name is NUL terminated
The user can change the device_name with the IMSETDEVNAME ioctl, but we
need to ensure that the user's name is NUL terminated. Otherwise it
could result in a buffer overflow when we copy the name back to the user
with IMGETDEVINFO ioctl.
I also changed two strcpy() calls which handle the name to strscpy().
Hopefully, there aren't any other ways to create a too long name, but
it's nice to do this as a kernel hardening measure.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'fs/binfmt_elf.c')
0 files changed, 0 insertions, 0 deletions