diff options
author | Jeroen Hofstee <jeroen@myspectrum.nl> | 2014-06-14 00:57:14 +0200 |
---|---|---|
committer | Marek Vasut <marex@denx.de> | 2014-06-25 22:44:40 +0200 |
commit | 29425be49bf301b55807dd27f55678e6d0a81060 (patch) | |
tree | 7522de18aa885aaf1cfdb6d5bb525ac0b800ba5c /drivers/usb/gadget/pxa25x_udc.c | |
parent | 25d1936a192ac62b8df5dc33e37455dcaeb19fae (diff) | |
download | u-boot-imx-29425be49bf301b55807dd27f55678e6d0a81060.zip u-boot-imx-29425be49bf301b55807dd27f55678e6d0a81060.tar.gz u-boot-imx-29425be49bf301b55807dd27f55678e6d0a81060.tar.bz2 |
usb: fastboot: fix potential buffer overflow
cb_getvar tries to prevent overflowing the response buffer
by using strncat. But strncat takes the number of data bytes
copied as a limit not the total buffer length so it can still
overflow. Pass the correct value instead.
cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
cc: Rob Herring <robh@kernel.org>
Signed-off-by: Jeroen Hofstee <jeroen@myspectrum.nl>
Diffstat (limited to 'drivers/usb/gadget/pxa25x_udc.c')
0 files changed, 0 insertions, 0 deletions