diff options
| author | Rafał Miłecki <rafal@milecki.pl> | 2018-05-08 11:31:04 +0200 |
|---|---|---|
| committer | Kalle Valo <kvalo@codeaurora.org> | 2018-05-12 11:36:59 +0300 |
| commit | 361de091a4b97aa9081d304d742f80d486ab7125 (patch) | |
| tree | 979eb9533d2b1d56efdd5ef83149e8d3fdaf23b6 /drivers/ssb | |
| parent | a8d7aa17bbc970971ccdf71988ea19230ab368b1 (diff) | |
| download | lwn-361de091a4b97aa9081d304d742f80d486ab7125.tar.gz lwn-361de091a4b97aa9081d304d742f80d486ab7125.zip | |
bcma: fix buffer size caused crash in bcma_core_mips_print_irq()
Used buffer wasn't big enough to hold whole strings. Example output of
this function is:
[ 0.180892] bcma: bus0: core 0x0800, irq: 2(S)* 3 4 5 6 D I
[ 0.180948] bcma: bus0: core 0x0812, irq: 2(S) 3* 4 5 6 D I
[ 0.180998] bcma: bus0: core 0x082d, irq: 2(S) 3 4* 5 6 D I
[ 0.181046] bcma: bus0: core 0x082c, irq: 2(S) 3 4 5 6 D I*
which means we need to store up to 24 chars.
Fixes: 758f7e06063a8 ("bcma: Use bcma_debug and not pr_cont in MIPS driver")
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Cc: stable@vger.kernel.org # v4.15+
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'drivers/ssb')
0 files changed, 0 insertions, 0 deletions