]> www.infradead.org Git - users/jedix/linux-maple.git/commit
iio: fix potential out-of-bound write
authorMarkus Burri <markus.burri@mt.com>
Thu, 8 May 2025 13:06:09 +0000 (15:06 +0200)
committerJonathan Cameron <Jonathan.Cameron@huawei.com>
Mon, 9 Jun 2025 06:45:19 +0000 (07:45 +0100)
commit16285a0931869baa618b1f5d304e1e9d090470a8
tree644530c0fbf0e46f5919d06bb70b41b3be9ce22e
parentda9374819eb3885636934c1006d450c3cb1a02ed
iio: fix potential out-of-bound write

The buffer is set to 20 characters. If a caller write more characters,
count is truncated to the max available space in "simple_write_to_buffer".
To protect from OoB access, check that the input size fit into buffer and
add a zero terminator after copy to the end of the copied data.

Fixes: 6d5dd486c715 iio: core: make use of simple_write_to_buffer()
Signed-off-by: Markus Burri <markus.burri@mt.com>
Link: https://patch.msgid.link/20250508130612.82270-4-markus.burri@mt.com
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
drivers/iio/industrialio-core.c