156e0b1a81
The dev_info.name[] array has space for RIO_MAX_DEVNAME_SZ + 1
characters. But the problem here is that we don't ensure that the user
put a NUL terminator on the end of the string. It could lead to an out
of bounds read.
Link: http://lkml.kernel.org/r/20190529110601.GB19119@mwanda
Fixes:
|
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
rio_mport_cdev.c | ||
tsi721_dma.c | ||
tsi721.c | ||
tsi721.h |