| commit | 20928bd3f08afb036c096d9559d581926b895918 | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Tue Oct 01 22:13:34 2013 -0700 |
| committer | David S. Miller <davem@davemloft.net> | Wed Oct 02 20:01:56 2013 -0400 |
| tree | 08bcf584e90c96224052645497e87c38d3083949 | |
| parent | c31eeaced22ce8bd61268a3c595d542bb38c0a4f [diff] |
sparc: fix ldom_reboot buffer overflow harder The length argument to strlcpy was still wrong. It could overflow the end of full_boot_str by 5 bytes. Instead of strcat and strlcpy, just use snprint. Reported-by: Brad Spengler <spender@grsecurity.net> Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: David S. Miller <davem@davemloft.net>