diff options
| author | Hans Verkuil <hverkuil-cisco@xs4all.nl> | 2019-08-15 10:00:33 -0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-10-05 13:13:42 +0200 |
| commit | a6856ba2704ab45ba5a22556910cd1e275cbf147 (patch) | |
| tree | 4578225bd124c6d57eab6fd9c9901ce4c037fac5 /drivers/media | |
| parent | ea9b3fba2de54636cb0294e36b1c66d3b8d83d6c (diff) | |
| download | linux-stable-a6856ba2704ab45ba5a22556910cd1e275cbf147.tar.gz linux-stable-a6856ba2704ab45ba5a22556910cd1e275cbf147.tar.bz2 linux-stable-a6856ba2704ab45ba5a22556910cd1e275cbf147.zip | |
media: hdpvr: add terminating 0 at end of string
[ Upstream commit 8b8900b729e4f31f12ac1127bde137c775c327e6 ]
dev->usbc_buf was passed as argument for %s, but it was not safeguarded
by a terminating 0.
This caused this syzbot issue:
https://syzkaller.appspot.com/bug?extid=79d18aac4bf1770dd050
Reported-and-tested-by: syzbot+79d18aac4bf1770dd050@syzkaller.appspotmail.com
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers/media')
| -rw-r--r-- | drivers/media/usb/hdpvr/hdpvr-core.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/media/usb/hdpvr/hdpvr-core.c b/drivers/media/usb/hdpvr/hdpvr-core.c index a0905c81d2cb..b75c18a012a7 100644 --- a/drivers/media/usb/hdpvr/hdpvr-core.c +++ b/drivers/media/usb/hdpvr/hdpvr-core.c @@ -137,6 +137,7 @@ static int device_authorization(struct hdpvr_device *dev) dev->fw_ver = dev->usbc_buf[1]; + dev->usbc_buf[46] = '\0'; v4l2_info(&dev->v4l2_dev, "firmware version 0x%x dated %s\n", dev->fw_ver, &dev->usbc_buf[2]); |