Dan Carpenter f873142252 drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings ... [ Upstream commit 156e0b1a81 ] The dev_info.name[] array has space for RIO_MAX_DEVNAME_SZ + 1 characters. But the problem here is that we don't ensure that the user put a NUL terminator on the end of the string. It could lead to an out of bounds read. Link: http://lkml.kernel.org/r/20190529110601.GB19119@mwanda Fixes: e8de370188 ("rapidio: add mport char device driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Alexandre Bounine <alex.bou9@gmail.com> Cc: Ira Weiny <ira.weiny@intel.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-08-06 19:06:52 +02:00
..
devices	drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings	2019-08-06 19:06:52 +02:00
switches	rapidio: constify rio_device_id	2017-11-17 16:10:03 -08:00
Kconfig	…
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
rio-access.c	rapidio: remove global irq spinlocks from the subsystem	2017-10-03 17:54:24 -07:00
rio-driver.c	…
rio-scan.c	treewide: kzalloc() -> kcalloc()	2018-06-12 16:19:22 -07:00
rio-sysfs.c	…
rio.c	rapidio: move 12 EXPORT_SYMBOL_GPL() calls to function implementations	2018-02-06 18:32:46 -08:00
rio.h	…
rio_cm.c	rapidio: fix a NULL pointer dereference when create_workqueue() fails	2019-06-15 11:53:59 +02:00