libertas: potential oops in debugfs
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 30 Oct 2013 17:12:51 +0000 (20:12 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 29 Nov 2013 18:42:14 +0000 (10:42 -0800)
commit84640fca73de9c3fac9059c059d33f510084ea95
tree5d43a4a7baa10e2f60e821728b14942a4c3b3253
parentfccd463bb4f4dbda01fda83866d0220c4884c2f5
libertas: potential oops in debugfs

commit a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 upstream.

If we do a zero size allocation then it will oops.  Also we can't be
sure the user passes us a NUL terminated string so I've added a
terminator.

This code can only be triggered by root.

Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Dan Williams <dcbw@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/libertas/debugfs.c