diff options
| author | Dan Carpenter <[email protected]> | 2024-04-15 11:02:23 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2024-05-08 18:44:21 +0000 |
| commit | 008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (patch) | |
| tree | 0b3997b99341fe783a64a376586d65bc96cf0548 /net/unix/af_unix.c | |
| parent | Linux 6.9-rc7 (diff) | |
| download | kernel-008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b.tar.gz kernel-008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b.zip | |
speakup: Fix sizeof() vs ARRAY_SIZE() bug
The "buf" pointer is an array of u16 values. This code should be
using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512),
otherwise it can the still got out of bounds.
Fixes: c8d2f34ea96e ("speakup: Avoid crash on very long word")
Cc: [email protected]
Signed-off-by: Dan Carpenter <[email protected]>
Reviewed-by: Samuel Thibault <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions