diff options
author | Brian Norris <computersforpeace@gmail.com> | 2014-07-22 02:08:13 (GMT) |
---|---|---|
committer | Brian Norris <computersforpeace@gmail.com> | 2014-08-19 18:53:09 (GMT) |
commit | 1cc8d8413327a684cd5e93cd52ececb0223bb40b (patch) | |
tree | c7d135bdbd80f8c84bfd29a0413f4d10ad1cfc6c /drivers/mtd | |
parent | 537ab1bd47d6518e8a40207a80dd0c2c4bc43aed (diff) | |
download | linux-1cc8d8413327a684cd5e93cd52ececb0223bb40b.tar.xz |
mtd: terminate user-provided string
Noticed by Coverity as a potential security issue.
Signed-off-by: Brian Norris <computersforpeace@gmail.com>
Diffstat (limited to 'drivers/mtd')
-rw-r--r-- | drivers/mtd/mtdchar.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/mtd/mtdchar.c b/drivers/mtd/mtdchar.c index a0f54e8..5356395 100644 --- a/drivers/mtd/mtdchar.c +++ b/drivers/mtd/mtdchar.c @@ -549,6 +549,9 @@ static int mtdchar_blkpg_ioctl(struct mtd_info *mtd, if (mtd_is_partition(mtd)) return -EINVAL; + /* Sanitize user input */ + p.devname[BLKPG_DEVNAMELTH - 1] = '\0'; + return mtd_add_partition(mtd, p.devname, p.start, p.length); case BLKPG_DEL_PARTITION: |