Commit 0ea52ff4 authored by Maulik Mankad's avatar Maulik Mankad Committed by Greg Kroah-Hartman

USB: musb: Fix array index out of bounds issue

This patch fixes the below array index out of bounds issue.

Buffer overflow, array index of 'aInfo' may be out of
bounds. Array 'aInfo' of size 78 may use index value(s) 6..84

The data stored in 'aInfo' array exceeds the array size of 78.

This patch increases the size of this array to hold the string
correctly without any memory corruption.

This issue was reported by Klockwork tool.
Signed-off-by: default avatarMaulik Mankad <x0082077@ti.com>
Cc: Felipe Balbi <felipe.balbi@nokia.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@suse.de>
parent 0abdc36f
...@@ -1319,7 +1319,7 @@ static int __init musb_core_init(u16 musb_type, struct musb *musb) ...@@ -1319,7 +1319,7 @@ static int __init musb_core_init(u16 musb_type, struct musb *musb)
#endif #endif
u8 reg; u8 reg;
char *type; char *type;
char aInfo[78], aRevision[32], aDate[12]; char aInfo[90], aRevision[32], aDate[12];
void __iomem *mbase = musb->mregs; void __iomem *mbase = musb->mregs;
int status = 0; int status = 0;
int i; int i;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment