wifi: iwlwifi: fix out of bound copy_from_user
authorAnjaneyulu <pagadala.yesu.anjaneyulu@intel.com>
Tue, 19 Dec 2023 19:58:55 +0000 (21:58 +0200)
committerJohannes Berg <johannes.berg@intel.com>
Thu, 21 Dec 2023 19:35:16 +0000 (20:35 +0100)
commitcb2dfacb197bed0241fbb4f84bd0995a47f4465e
treec0f3900405997327596a3e6850639fff78b9d7a5
parentc5bfdb46636a2ea7f0678243c6d3e9f8d26b027a
wifi: iwlwifi: fix out of bound copy_from_user

The driver copies the userspace buffer into an internal NUL
byte terminated buffer. While doing so, it was reading beyond
the end of the userspace buffer, overwriting its own NUL
termination in the process.

Fix this by only copying the correct number of bytes.

Fixes: 3f244876ef73 ("wifi: iwlwifi: make debugfs entries link specific")
Signed-off-by: Anjaneyulu <pagadala.yesu.anjaneyulu@intel.com>
Reviewed-by: Gregory Greenman <gregory.greenman@intel.com>
Reviewed-by: Benjamin Berg <benjamin.berg@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://msgid.link/20231219215605.e4913deb2ad4.Idcf6a7e909ff4b7801cd49c2f691f84a2f68eff9@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c