diff options
author | Chen Gang <gang.chen@asianux.com> | 2013-01-08 05:33:03 (GMT) |
---|---|---|
committer | John W. Linville <linville@tuxdriver.com> | 2013-01-22 21:01:29 (GMT) |
commit | 708d019fd1d2d1bf184e797ebe934c90a6527d50 (patch) | |
tree | 332a80b8f144cd0b82988ec4f7a63fb5cb769c05 /drivers/net/wireless/b43 | |
parent | 6aaacd861517f89797f2f4a54624a599847262f3 (diff) | |
download | linux-fsl-qoriq-708d019fd1d2d1bf184e797ebe934c90a6527d50.tar.xz |
drivers/net/wireless: need consider the not '\0' terminated string.
in ray_cs.c:
the a_current_ess_id is "Null terminated unless ESSID_SIZE long"
so we need buffer it with '\0' firstly, before using strlen or %s.
additional information:
in drivers/net/wireless/rayctl.h:
"NULL terminated unless 32 long" is a comment at line 616, 664
ESSID_SIZE is 32, at line 190
in include/uapi/linux/wireless.h:
IW_ESSID_MAX_SIZE is also 32
in drivers/net/wireless/ray_cs.c:
use strncpy for it, without '\0' terminated, at line 639
use memcpy for it, assume not '\0' terminated in line 1092..1097
buffer it with '\0' firstly, before using %s, in line 2576, 2598..2600
Signed-off-by: Chen Gang <gang.chen@asianux.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/b43')
0 files changed, 0 insertions, 0 deletions