If the memory used to copy the link_make is "dirty" the string wont
be ended with Zero, throwing out multiple memory bugs.
Signed-off-by: Ricardo Ribalda Delgado <ricardo.riba...@uam.es>
---
v2: better doc and remove duplicated memcpy
fs/ubifs/ubifs.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/fs/ubifs/ubifs.c b/fs/ubifs/ubifs.c
index 32f9ff8..3c8b5da 100644
--- a/fs/ubifs/ubifs.c
+++ b/fs/ubifs/ubifs.c
@@ -641,6 +641,7 @@ int ubifs_load(char *filename, u32 addr, u32 size)
ui = ubifs_inode(inode);
if (((inode->i_mode & S_IFMT) == S_IFLNK) && ui->data_len) {
memcpy(link_name, ui->data, ui->data_len);
+ link_name[ui->data_len]='\0';
printf("%s is linked to %s!\n", filename, link_name);
ubifs_iput(inode);
--
1.6.2.4
_______________________________________________
U-Boot mailing list
U-Boot@lists.denx.de
http://lists.denx.de/mailman/listinfo/u-boot
