Commit cc7e7d38 authored Jun 07, 2010 by Dan Carpenter Committed by Greg Kroah-Hartman Jun 18, 2010

Staging: otus: fix strcpy() overflow



wrq->name is only 16 characters long but "IEEE 802.11-MIMO" is 16
characters + a NULL character, so it's too long.  This patch changes it
to "IEEE 802.11abgn".

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

parent 84f8008a

drivers/staging/otus/ioctl.c

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -507,7 +507,7 @@ int usbdrvwext_giwname(struct net_device *dev,
	{		{
	/* struct usbdrv_private macp = dev->ml_priv; /		/* struct usbdrv_private macp = dev->ml_priv; /

	strcpy(wrq->name, "IEEE 802.11-MIMO");		strcpy(wrq->name, "IEEE 802.11abgn");

	return 0;		return 0;
	}		}