in get_removable_partition()
if (strcmp (de->name, "disc") == 0) return check_disc_changed (de);
with
if ( name && (namelen < 1) ) namelen = strlen (name);
if ( ( new = kmalloc (sizeof *new + namelen, GFP_KERNEL) ) == NULL )
return NULL;
...
if (name) memcpy (new->name, name, namelen);
in create_entry().
IOW, ->name is not NUL-terminated.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/