Re: [patch 2/2] staging: r8188eu: overflow in rtw_p2p_get_go_device_address()

2014-02-07 Thread walter harms
Am 03.02.2014 23:38, schrieb Dan Carpenter: The go_devadd_str[] array is two characters too small to hold the address so we corrupt memory. I've changed the user space API slightly and I don't have a way to test if this breaks anything. In the original code we truncated away the last

[patch 2/2] staging: r8188eu: overflow in rtw_p2p_get_go_device_address()

2014-02-03 Thread Dan Carpenter
The go_devadd_str[] array is two characters too small to hold the address so we corrupt memory. I've changed the user space API slightly and I don't have a way to test if this breaks anything. In the original code we truncated away the last digit of the address and the NUL terminator so it was