usbip: Fix sscanf handling
Scan only to the length permitted by the buffer One of a set of sscanf problems noted by Jackie Chang Signed-off-by: Alan Cox <alan@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
66a01f1158
commit
2d32927127
|
@ -165,7 +165,7 @@ int read_attr_speed(struct sysfs_device *dev)
|
|||
goto err;
|
||||
}
|
||||
|
||||
ret = sscanf(attr->value, "%s\n", speed);
|
||||
ret = sscanf(attr->value, "%99s\n", speed);
|
||||
if (ret < 1) {
|
||||
dbg("sscanf failed");
|
||||
goto err;
|
||||
|
|
|
@ -72,7 +72,7 @@ static int parse_status(char *value)
|
|||
unsigned long socket;
|
||||
char lbusid[SYSFS_BUS_ID_SIZE];
|
||||
|
||||
ret = sscanf(c, "%d %d %d %x %lx %s\n",
|
||||
ret = sscanf(c, "%d %d %d %x %lx %31s\n",
|
||||
&port, &status, &speed,
|
||||
&devid, &socket, lbusid);
|
||||
|
||||
|
|
Loading…
Reference in a new issue