aboutsummaryrefslogtreecommitdiffstats
path: root/include/net/bluetooth
diff options
context:
space:
mode:
authorDan Carpenter <dan.carpenter@oracle.com>2019-05-16 21:24:00 +0300
committerMarcel Holtmann <marcel@holtmann.org>2019-07-06 13:07:41 +0200
commitdcae9052ebb0c5b2614de620323d615fcbfda7f8 (patch)
tree88c970ef166cff7817c2b060dc6bdfc711426532 /include/net/bluetooth
parentBluetooth: Add new 13d3:3491 QCA_ROME device (diff)
downloadlinux-dev-dcae9052ebb0c5b2614de620323d615fcbfda7f8.tar.xz
linux-dev-dcae9052ebb0c5b2614de620323d615fcbfda7f8.zip
Bluetooth: hidp: NUL terminate a string in the compat ioctl
This change is similar to commit a1616a5ac99e ("Bluetooth: hidp: fix buffer overflow") but for the compat ioctl. We take a string from the user and forgot to ensure that it's NUL terminated. I have also changed the strncpy() in to strscpy() in hidp_setup_hid(). The difference is the strncpy() doesn't necessarily NUL terminate the destination string. Either change would fix the problem but it's nice to take a belt and suspenders approach and do both. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Diffstat (limited to 'include/net/bluetooth')
0 files changed, 0 insertions, 0 deletions