OSDN Git Service

ALSA: seq: Fix OOB-reads from strlcpy
authorZubin Mithra <zsm@chromium.org>
Thu, 4 Apr 2019 21:33:55 +0000 (14:33 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 27 Apr 2019 07:33:55 +0000 (09:33 +0200)
commitae9981cee7b321ae018a345beb0ed0eb09a0fc18
tree5fdcf08014e1f1d73b8bfb8c9747ee5f890eb115
parent3efb978c3c73f66ed40157de2f45f7fda7bda059
ALSA: seq: Fix OOB-reads from strlcpy

commit 212ac181c158c09038c474ba68068be49caecebb upstream.

When ioctl calls are made with non-null-terminated userspace strings,
strlcpy causes an OOB-read from within strlen. Fix by changing to use
strscpy instead.

Signed-off-by: Zubin Mithra <zsm@chromium.org>
Reviewed-by: Guenter Roeck <groeck@chromium.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sound/core/seq/seq_clientmgr.c