Re: [PATCH] wireless: wext: terminate ifr name coming from userspace

From: David Miller
Date: Wed Jul 19 2017 - 16:33:58 EST


From: "Levin, Alexander (Sasha Levin)" <alexander.levin@xxxxxxxxxxx>
Date: Tue, 18 Jul 2017 04:23:16 +0000

> ifr name is assumed to be a valid string by the kernel, but nothing
> was forcing username to pass a valid string.
>
> In turn, this would cause panics as we tried to access the string
> past it's valid memory.
>
> Signed-off-by: Sasha Levin <alexander.levin@xxxxxxxxxxx>

Applied and queued up for -stable.

dev_ifname() has the same bug, I'll post a patch for that.