Commit 035b4989 authored by Nuno Sá's avatar Nuno Sá Committed by Jonathan Cameron
Browse files

iio: backend: make sure to NULL terminate stack buffer 



Make sure to NULL terminate the buffer in
iio_backend_debugfs_write_reg() before passing it to sscanf(). It is a
stack variable so we should not assume it will 0 initialized.

Fixes: cdf01e08 ("iio: backend: add debugFs interface")
Signed-off-by: default avatarNuno Sá <nuno.sa@analog.com>
Reviewed-by: default avatarDavid Lechner <dlechner@baylibre.com>
Link: https://patch.msgid.link/20250218-dev-iio-misc-v1-1-bf72b20a1eb8@analog.com


Signed-off-by: default avatarJonathan Cameron <Jonathan.Cameron@huawei.com>
parent 1a21a984

drivers/iio/industrialio-backend.c

+3 −1
Original line number Diff line number Diff line
@@ -155,10 +155,12 @@ static ssize_t iio_backend_debugfs_write_reg(struct file *file, 
	ssize_t rc;

	int ret;



	rc = simple_write_to_buffer(buf, sizeof(buf), ppos, userbuf, count);

	rc = simple_write_to_buffer(buf, sizeof(buf) - 1, ppos, userbuf, count);

	if (rc < 0)

		return rc;



	buf[count] = '\0';



	ret = sscanf(buf, "%i %i", &back->cached_reg_addr, &val);



	switch (ret) {