Re: [PATCH v4 1/6] iio: backend: fix out-of-bound write

2025-05-11 Thread Jonathan Cameron
On Thu, 8 May 2025 15:06:07 +0200 Markus Burri wrote: > The buffer is set to 80 character. If a caller write more characters, > count is truncated to the max available space in "simple_write_to_buffer". > But afterwards a string terminator is written to the buffer at offset count > without bound

[PATCH v4 1/6] iio: backend: fix out-of-bound write

2025-05-09 Thread Markus Burri
The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND. Add a c