Commit 02fe75a9 authored by Linda Xie's avatar Linda Xie Committed by Linus Torvalds

[PATCH] PCI Hotplug: Fix buffer overrun in rpadlpar_sysfs.c

Signed-off-by: default avatarLinda Xie <lxie@us.ibm.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: default avatarLinus Torvalds <torvalds@osdl.org>
parent 3c6de929
...@@ -62,7 +62,7 @@ static ssize_t add_slot_store(struct dlpar_io_attr *dlpar_attr, ...@@ -62,7 +62,7 @@ static ssize_t add_slot_store(struct dlpar_io_attr *dlpar_attr,
char drc_name[MAX_DRC_NAME_LEN]; char drc_name[MAX_DRC_NAME_LEN];
char *end; char *end;
if (nbytes > MAX_DRC_NAME_LEN) if (nbytes >= MAX_DRC_NAME_LEN)
return 0; return 0;
memcpy(drc_name, buf, nbytes); memcpy(drc_name, buf, nbytes);
...@@ -83,7 +83,7 @@ static ssize_t remove_slot_store(struct dlpar_io_attr *dlpar_attr, ...@@ -83,7 +83,7 @@ static ssize_t remove_slot_store(struct dlpar_io_attr *dlpar_attr,
char drc_name[MAX_DRC_NAME_LEN]; char drc_name[MAX_DRC_NAME_LEN];
char *end; char *end;
if (nbytes > MAX_DRC_NAME_LEN) if (nbytes >= MAX_DRC_NAME_LEN)
return 0; return 0;
memcpy(drc_name, buf, nbytes); memcpy(drc_name, buf, nbytes);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment