commit 1cc8d8413327a684cd5e93cd52ececb0223bb40b
author Brian Norris <computersforpeace@gmail.com> Mon Jul 21 19:08:13 2014 -0700
committer Brian Norris <computersforpeace@gmail.com> Tue Aug 19 11:53:09 2014 -0700
tree c7d135bdbd80f8c84bfd29a0413f4d10ad1cfc6c
parent 537ab1bd47d6518e8a40207a80dd0c2c4bc43aed

mtd: terminate user-provided string

Noticed by Coverity as a potential security issue.

Signed-off-by: Brian Norris <computersforpeace@gmail.com>

drivers/mtd/mtdchar.c

diff --git a/drivers/mtd/mtdchar.c b/drivers/mtd/mtdchar.c
index a0f54e8..5356395 100644
--- a/drivers/mtd/mtdchar.c
+++ b/drivers/mtd/mtdchar.c
@@ -549,6 +549,9 @@
 		if (mtd_is_partition(mtd))
 			return -EINVAL;
 
+		/* Sanitize user input */
+		p.devname[BLKPG_DEVNAMELTH - 1] = '\0';
+
 		return mtd_add_partition(mtd, p.devname, p.start, p.length);
 
 	case BLKPG_DEL_PARTITION: