diff options
| author | Dominik Czarnota <dominik.b.czarnota@gmail.com> | 2020-03-09 16:22:50 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2020-03-11 23:07:34 -0700 |
| commit | f3cc008bf6d59b8d93b4190e01d3e557b0040e15 (patch) | |
| tree | 839c2420a7434c3826a467f8d0d303f904ca096c /net/packet | |
| parent | f9fc28a8de2fb367f1ab76f0cf176ca545db3d6f (diff) | |
| download | linux-f3cc008bf6d59b8d93b4190e01d3e557b0040e15.tar.gz linux-f3cc008bf6d59b8d93b4190e01d3e557b0040e15.tar.bz2 linux-f3cc008bf6d59b8d93b4190e01d3e557b0040e15.zip | |
sxgbe: Fix off by one in samsung driver strncpy size arg
This patch fixes an off-by-one error in strncpy size argument in
drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c. The issue is that in:
strncmp(opt, "eee_timer:", 6)
the passed string literal: "eee_timer:" has 10 bytes (without the NULL
byte) and the passed size argument is 6. As a result, the logic will
also accept other, malformed strings, e.g. "eee_tiXXX:".
This bug doesn't seem to have any security impact since its present in
module's cmdline parsing code.
Signed-off-by: Dominik Czarnota <dominik.b.czarnota@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/packet')
0 files changed, 0 insertions, 0 deletions