Re: [PATCH] PM / OPP: Use snprintf() instead of sprintf()

On 01/05, Viresh Kumar wrote:

sprintf() can access memory outside of the range of the character array, and is risky in some situations. The driver specified prop_name string can be longer than NAME_MAX here (only an attacker will do that though) and so blindly copying it into the character array of size NAME_MAX isn't safe. Instead we must use snprintf() here.

Reported-by: Geert Uytterhoeven geert@linux-m68k.org Signed-off-by: Viresh Kumar viresh.kumar@linaro.org

---

Acked-by: Stephen Boyd sboyd@codeaurora.org