diff options
| author | Zhen Kong <zkong@codeaurora.org> | 2017-06-16 11:55:07 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-06-20 16:16:26 -0700 |
| commit | 70ca7ca60da4825d1c4db0756002e4ff2979d210 (patch) | |
| tree | 0529c9e1878c63ff463c0e46c0a2a9715dd7ad0c /drivers | |
| parent | 560a996da5c0bf398d2fba51e9909cd7323afea8 (diff) | |
qseecom: use strnlen in qseecom_start_app
The appname received by qseecom_start_app() can be non-null terminated
string beyond the max size check. Change strlen to strnlen.
CRs-fixed: 2062061
Change-Id: I845d244336b5c81cedb2153d1303585f16819d58
Signed-off-by: Zhen Kong <zkong@codeaurora.org>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/misc/qseecom.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/misc/qseecom.c b/drivers/misc/qseecom.c index 500185546599..7cdcd69cecf4 100644 --- a/drivers/misc/qseecom.c +++ b/drivers/misc/qseecom.c @@ -4379,9 +4379,9 @@ int qseecom_start_app(struct qseecom_handle **handle, return -EINVAL; } - if (strlen(app_name) >= MAX_APP_NAME_SIZE) { + if (strnlen(app_name, MAX_APP_NAME_SIZE) == MAX_APP_NAME_SIZE) { pr_err("The app_name (%s) with length %zu is not valid\n", - app_name, strlen(app_name)); + app_name, strnlen(app_name, MAX_APP_NAME_SIZE)); return -EINVAL; } |