[alsa-devel] [PATCH] ALSA: seq: Fix OOB-reads from strlcpy

Takashi Iwai tiwai at suse.de
Fri Apr 5 14:40:30 CEST 2019


On Thu, 04 Apr 2019 23:33:55 +0200,
Zubin Mithra wrote:
> 
> When ioctl calls are made with non-null-terminated userspace strings,
> strlcpy causes an OOB-read from within strlen. Fix by changing to use
> strscpy instead.
> 
> Signed-off-by: Zubin Mithra <zsm at chromium.org>

Applied with Cc to stable now.  Thanks.


Takashi


More information about the Alsa-devel mailing list