From: Jiamin Ma <jiamin.ma@amlogic.com>
Date: Fri, 19 Apr 2019 00:15:47 +0000 (+0800)
Subject: unifikey: fix kasan bug reported in name_store [1/1]
X-Git-Tag: khadas-vims-v0.9.6-release~450
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=36aca84a713d6f26aada82314e0da0bbbe5b8667;p=platform%2Fkernel%2Flinux-amlogic.git

unifikey: fix kasan bug reported in name_store [1/1]

PD#SWPL-7326

Problem:
slab-out-of-bounds in strlen called by name_store

Solution:
Make sure the string passed to strlen is always '\0'
ended

Verify:
Locally

Change-Id: Ifd78a100c0e34ff9afb527ebe7b044ceb5c3505e
Signed-off-by: Jiamin Ma <jiamin.ma@amlogic.com>
---

diff --git a/drivers/amlogic/unifykey/unifykey.c b/drivers/amlogic/unifykey/unifykey.c
index c1e3524..d2a9fad 100644
--- a/drivers/amlogic/unifykey/unifykey.c
+++ b/drivers/amlogic/unifykey/unifykey.c
@@ -1277,7 +1277,7 @@ static ssize_t name_store(struct class *cla,
 	}
 
 	key_cnt = unifykey_count_key(&(ukdev->uk_header));
-	name = kzalloc(count, GFP_KERNEL);
+	name = kzalloc(count + 1, GFP_KERNEL);
 	if (!name) {
 		pr_err("can't kzalloc mem,%s:%d\n",
 			__func__,