mirror of https://github.com/torvalds/linux.git
300a0cfe9f
In cdx_rpmsg_probe(), strscpy() is incorrectly called with the length of
the source string (excluding the NUL terminator) rather than the size of
the destination buffer. This results in one character less being copied
from 'cdx_rpmsg_id_table[0].name' to 'chinfo.name'.
Use the destination buffer size instead to ensure the name is copied
correctly.
Cc: stable <stable@kernel.org>
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| bitfield.h | ||
| cdx_controller.c | ||
| cdx_controller.h | ||
| cdx_rpmsg.c | ||
| mc_cdx_pcol.h | ||
| mcdi.c | ||
| mcdi.h | ||
| mcdi_functions.c | ||
| mcdi_functions.h | ||