]> www.infradead.org Git - users/jedix/linux-maple.git/commitdiff
Changed length for strncpy to OVMM_MAX_NAME_LEN
authorCathy Avery <cathy.avery@oracle.com>
Thu, 12 Jul 2012 13:45:08 +0000 (09:45 -0400)
committerMaxim Uvarov <maxim.uvarov@oracle.com>
Thu, 12 Jul 2012 15:43:57 +0000 (08:43 -0700)
Orabug: 14233627
This is the fix for Oracle Bug 14233627
Signed-off-by: Cathy Avery <cathy.avery@oracle.com>
drivers/xen/ovmapi.c

index d3a64afe5053cf42c3c4415cc0ffdab2967c4a0b..cc325a3c444d1b86664c455c3d36d662789b942c 100644 (file)
@@ -983,7 +983,7 @@ static long ovmapi_ioctl(struct file *file, unsigned int cmd,
                if (!name)
                        return -ENOMEM;
                value = kmalloc(message.value_size, GFP_ATOMIC);
-               strncpy(name, message.name, message.value_size);
+               strncpy(name, message.name,OVMM_MAX_NAME_LEN);
                if (copy_from_user(value, message.value, message.value_size))
                        return -EFAULT;
                status = ovmapi_send_dom0_message(&ovmapi_info, name, value,
@@ -1001,6 +1001,7 @@ static long ovmapi_ioctl(struct file *file, unsigned int cmd,
                        return -EINVAL;
                status = ovmapi_delete_parameter(&ovmapi_info, argp);
                return status;
+
        case IOCTL_XENPCI_POST_EVENT:
                if (!arg)
                        return -EINVAL;