Dan Carpenter 684392e5bc Bluetooth: hidp: NUL terminate a string in the compat ioctl ...

[ Upstream commit dcae9052eb ]

This change is similar to commit a1616a5ac9 ("Bluetooth: hidp: fix
buffer overflow") but for the compat ioctl.  We take a string from the
user and forgot to ensure that it's NUL terminated.

I have also changed the strncpy() in to strscpy() in hidp_setup_hid().
The difference is the strncpy() doesn't necessarily NUL terminate the
destination string.  Either change would fix the problem but it's nice
to take a belt and suspenders approach and do both.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-07-26 09:10:45 +02:00

..

core.c

Bluetooth: hidp: NUL terminate a string in the compat ioctl

2019-07-26 09:10:45 +02:00

hidp.h

hidp: constify hidp_connection_add()

2018-09-10 12:41:07 -04:00

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

Makefile

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

sock.c

Bluetooth: hidp: NUL terminate a string in the compat ioctl

2019-07-26 09:10:45 +02:00