cpupower: Fix sscanf robustness in cpufreq-set

The cpufreq-set tool has a missing length check. This is basically
just correctness but still should get fixed.

One of a set of sscanf problems reported by Jackie Chang

Signed-off-by: Alan Cox <alan@linux.intel.com>
[rjw: Subject]
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>

diff --git a/tools/power/cpupower/utils/cpufreq-set.c b/tools/power/cpupower/utils/cpufreq-set.c
index dd1539eb8c63de3e8d166b24a5f79b65702a4685..a416de80c55ea120f83b183b1b0db2aa824e2c22 100644 (file)
--- a/tools/power/cpupower/utils/cpufreq-set.c
+++ b/tools/power/cpupower/utils/cpufreq-set.c
@@ -257,7 +257,7 @@ int cmd_freq_set(int argc, char **argv)
                                print_unknown_arg();
                                return -EINVAL;
                        }
-                       if ((sscanf(optarg, "%s", gov)) != 1) {
+                       if ((sscanf(optarg, "%19s", gov)) != 1) {
                                print_unknown_arg();
                                return -EINVAL;
                        }