wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 15 Jul 2022 10:35:18 +0000 (13:35 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 17 Aug 2022 12:23:31 +0000 (14:23 +0200)
commit074e865b37da55aa87baa16d68b96896f85f8adb
tree0aa6baa54674fbc6d60b17e4808cd511f78aea25
parent05f3b437c962b8ed78ae18b4457a75911ea88b0d
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()

[ Upstream commit 7a4836560a6198d245d5732e26f94898b12eb760 ]

The simple_write_to_buffer() function will succeed if even a single
byte is initialized.  However, we need to initialize the whole buffer
to prevent information leaks.  Just use memdup_user().

Fixes: ff974e408334 ("wil6210: debugfs interface to send raw WMI command")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/Ysg14NdKAZF/hcNG@kili
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/ath/wil6210/debugfs.c