Messages in this thread | | | Date | Sun, 6 Feb 2011 17:49:23 +0100 | Subject | [PATCH] uinput strnlen bugfix | From | David Herrmann <> |
| |
The uinput device driver (drivers/input/misc/uinput.c) incorrectly computes the size of new device names. This patch fixes this. The diff is against 2.6.37 but the bug also exists in the most recent git sources.
strnlen() never returns negative numbers so the result should be incremented after checking for zero. Otherwise the test will always be false. This bug allows empty input device names.
Please CC me, I'm not subscribed to the mailing list.
David
| |