Merge "msm: ipa: prevent string buffer overflows" (d7d7dc83) · Commits · e / devices / android_kernel_oneplus_sm8150

drivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c

+14 −0

Original line number	Diff line number	Diff line
		@@ -2772,6 +2772,9 @@ int rmnet_ipa3_set_data_quota(struct wan_ioctl_set_data_quota *data)
		enum ipa_upstream_type upstream_type;
		int rc = 0;

		/* prevent string buffer overflows */
		data->interface_name[IFNAMSIZ-1] = '\0';

		/* get IPA backhaul type */
		upstream_type = find_upstream_type(data->interface_name);

		@@ -3040,6 +3043,10 @@ int rmnet_ipa3_query_tethering_stats(struct wan_ioctl_query_tether_stats *data,
		enum ipa_upstream_type upstream_type;
		int rc = 0;

		/* prevent string buffer overflows */
		data->upstreamIface[IFNAMSIZ-1] = '\0';
		data->tetherIface[IFNAMSIZ-1] = '\0';

		/* get IPA backhaul type */
		upstream_type = find_upstream_type(data->upstreamIface);

		@@ -3074,6 +3081,10 @@ int rmnet_ipa3_query_tethering_stats_all(
		int rc = 0;

		memset(&tether_stats, 0, sizeof(struct wan_ioctl_query_tether_stats));

		/* prevent string buffer overflows */
		data->upstreamIface[IFNAMSIZ-1] = '\0';

		/* get IPA backhaul type */
		upstream_type = find_upstream_type(data->upstreamIface);

		@@ -3117,6 +3128,9 @@ int rmnet_ipa3_reset_tethering_stats(struct wan_ioctl_reset_tether_stats *data)

		memset(&tether_stats, 0, sizeof(struct wan_ioctl_query_tether_stats));

		/* prevent string buffer overflows */
		data->upstreamIface[IFNAMSIZ-1] = '\0';

		/* get IPA backhaul type */
		upstream_type = find_upstream_type(data->upstreamIface);