[COMMON] bcm: fix stack overflow possibility.

Change-Id: Ia87174a7f0f04dfaf2e03935f66348ec1119d50b
Signed-off-by: Seokju Yoon <sukju.yoon@samsung.com>

diff --git a/drivers/soc/samsung/exynos-bcm.c b/drivers/soc/samsung/exynos-bcm.c
index 3d60a0462141e467be25b6a0730c0d0b8c3bef14..93d9983cf98d8354ae9e6ef0a311f9d568ee0a33 100644 (file)
--- a/drivers/soc/samsung/exynos-bcm.c
+++ b/drivers/soc/samsung/exynos-bcm.c
@@ -410,17 +410,16 @@ static ssize_t store_load_bcm_fw(struct device *dev,
        unsigned long flags;
        int ret;
        bool value = true;
-       char str[FILE_STR];
 
-       ret = sscanf(buf, "%s", str);
-       if (ret != 1) {
-               dev_err(dev, "failed sscanf %d\n", ret);
-               return -EINVAL;
-       }
-       if (str[0] == '0')
+       if (buf[0] == '0') {
                value = false;
-       else if (str[0] == '/')
-               strncpy(input_file, str, strlen(str) + 1);
+       } else if (buf[0] == '/' && strlen(buf) < FILE_STR) {
+               ret = sscanf(buf, "%s", input_file);
+               if (ret != 1) {
+                       dev_err(dev, "failed sscanf %d\n", ret);
+                       return -EINVAL;
+               }
+       }
 
        /* bcm stop and pd unprepare */
        if (fw_func) {