From 75044ebe4b9dd76b46cb39fe29563744c6a2fa38 Mon Sep 17 00:00:00 2001 From: Avinash Kumar Date: Mon, 11 Sep 2023 12:17:20 +0530 Subject: [PATCH] msm: ipa: Null terminated interface name string argument received from ioctl WAN MTU IOCTL received NULL terminated the interface name string to prevent out of bound memory access while printing interface name. Change-Id: I4ca8021e91689f2b1bf0bef7917a5fc7c2168aef Signed-off-by: Avinash Kumar (cherry picked from commit b639c459e4f7eedc361cee795489de3d379e7e0c) --- drivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/drivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c b/drivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c index 90f04cc6b3f2..46c11fb49ea6 100644 --- a/drivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c +++ b/drivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c @@ -4950,6 +4950,10 @@ int rmnet_ipa3_get_wan_mtu( int rmnet_index; mux_channel = rmnet_ipa3_ctx->mux_channel; + + /* prevent string buffer overflows */ + data->if_name[IPA_RESOURCE_NAME_MAX-1] = '\0'; + rmnet_index = find_vchannel_name_index(data->if_name);