libertas: potential oops in debugfs
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 30 Oct 2013 17:12:51 +0000 (20:12 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 29 Nov 2013 19:27:52 +0000 (11:27 -0800)
commit0f6ff65ed8d3630118c3149a4fbc493dd3b8fdc4
tree4622c376d2e9a2063df825a515dccffb836e1ac7
parent9e5129ba8d3d65605683050f73f12dddbf3f8c00
libertas: potential oops in debugfs

commit a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 upstream.

If we do a zero size allocation then it will oops.  Also we can't be
sure the user passes us a NUL terminated string so I've added a
terminator.

This code can only be triggered by root.

Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Dan Williams <dcbw@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/libertas/debugfs.c