kernel/drivers/of/device.c
.. .. @@ -264,12 +264,15 @@ 264 264 if (size < 0) 265 265 return size; 266 266 267 - str = kmalloc(size + 1, GFP_KERNEL);267 + /* Reserve an additional byte for the trailing '\0' */268 + size++;269 +270 + str = kmalloc(size, GFP_KERNEL);268 271 if (!str) 269 272 return -ENOMEM; 270 273 271 274 of_device_get_modalias(dev, str, size); 272 - str[size] = '\0';275 + str[size - 1] = '\0';273 276 ret = request_module(str); 274 277 kfree(str); 275 278