Commit 1cc8d841 authored by Brian Norris's avatar Brian Norris

mtd: terminate user-provided string

Noticed by Coverity as a potential security issue.
Signed-off-by: default avatarBrian Norris <computersforpeace@gmail.com>
parent 537ab1bd
......@@ -549,6 +549,9 @@ static int mtdchar_blkpg_ioctl(struct mtd_info *mtd,
if (mtd_is_partition(mtd))
return -EINVAL;
/* Sanitize user input */
p.devname[BLKPG_DEVNAMELTH - 1] = '\0';
return mtd_add_partition(mtd, p.devname, p.start, p.length);
case BLKPG_DEL_PARTITION:
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment