libertas: potential oops in debugfs
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 30 Oct 2013 17:12:51 +0000 (20:12 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 29 Nov 2013 19:11:39 +0000 (11:11 -0800)
commitcdd9192be79055a0595092c2abea69399e4d951d
treeacb8a300d3e644cb4b2d6b450f5327d5b09ff717
parent82eb7924131196deccf9f09fd29d96960bc48200
libertas: potential oops in debugfs

commit a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 upstream.

If we do a zero size allocation then it will oops.  Also we can't be
sure the user passes us a NUL terminated string so I've added a
terminator.

This code can only be triggered by root.

Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Dan Williams <dcbw@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/libertas/debugfs.c