Messages in this thread | | | Date | Sun, 6 Feb 2011 11:55:24 -0500 | From | Aristeu Rozanski <> | Subject | Re: [PATCH] uinput strnlen bugfix |
| |
On Sun, Feb 06, 2011 at 05:49:23PM +0100, David Herrmann wrote: > The uinput device driver (drivers/input/misc/uinput.c) incorrectly > computes the size of new device names. This patch fixes this. The diff > is against 2.6.37 but the bug also exists in the most recent git > sources. > > strnlen() never returns negative numbers so the result should be > incremented after checking for zero. Otherwise the test will always be > false. This bug allows empty input device names. > > Please CC me, I'm not subscribed to the mailing list. and where's the patch? :^)
-- Aristeu
| |