diff options
author | Johannes Berg <johannes.berg@intel.com> | 2017-02-27 16:15:28 (GMT) |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-10-21 15:21:34 (GMT) |
commit | 4799163a7a19499678327a04d65ce0394492632a (patch) | |
tree | b1184449e73161364d082e926aab7be581a41c17 /security | |
parent | aaf54d40b83fa6ebcdccdd895f97cd86b8f67406 (diff) | |
download | linux-4799163a7a19499678327a04d65ce0394492632a.tar.xz |
mac80211_hwsim: check HWSIM_ATTR_RADIO_NAME length
[ Upstream commit ff4dd73dd2b4806419f8ff65cbce11d5019548d0 ]
Unfortunately, the nla policy was defined to have HWSIM_ATTR_RADIO_NAME
as an NLA_STRING, rather than NLA_NUL_STRING, so we can't use it as a
NUL-terminated string in the kernel.
Rather than break the API, kasprintf() the string to a new buffer to
guarantee NUL termination.
Reported-by: Andrew Zaborowski <andrew.zaborowski@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions