Commit 84ce981a authored by Dan Carpenter's avatar Dan Carpenter Committed by David S. Miller

isdn: fix strlen() usage

There was a missing "else" statement so the original code overflowed if
->master->name was too long.  Also the ->slave and ->master buffers can
hold names with 9 characters and a NULL so I cleaned it up to allow
another character.
Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 5c4bfa17
...@@ -2924,15 +2924,16 @@ isdn_net_getcfg(isdn_net_ioctl_cfg * cfg) ...@@ -2924,15 +2924,16 @@ isdn_net_getcfg(isdn_net_ioctl_cfg * cfg)
cfg->dialtimeout = lp->dialtimeout >= 0 ? lp->dialtimeout / HZ : -1; cfg->dialtimeout = lp->dialtimeout >= 0 ? lp->dialtimeout / HZ : -1;
cfg->dialwait = lp->dialwait / HZ; cfg->dialwait = lp->dialwait / HZ;
if (lp->slave) { if (lp->slave) {
if (strlen(lp->slave->name) > 8) if (strlen(lp->slave->name) >= 10)
strcpy(cfg->slave, "too-long"); strcpy(cfg->slave, "too-long");
else else
strcpy(cfg->slave, lp->slave->name); strcpy(cfg->slave, lp->slave->name);
} else } else
cfg->slave[0] = '\0'; cfg->slave[0] = '\0';
if (lp->master) { if (lp->master) {
if (strlen(lp->master->name) > 8) if (strlen(lp->master->name) >= 10)
strcpy(cfg->master, "too-long"); strcpy(cfg->master, "too-long");
else
strcpy(cfg->master, lp->master->name); strcpy(cfg->master, lp->master->name);
} else } else
cfg->master[0] = '\0'; cfg->master[0] = '\0';
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment