diff options
| author | Kees Cook <keescook@chromium.org> | 2023-09-30 09:20:20 -0700 |
|---|---|---|
| committer | Dmitry Torokhov <dmitry.torokhov@gmail.com> | 2023-09-30 09:24:17 -0700 |
| commit | 348cbf987ed328682af7d74ce98d9f0e6857f42f (patch) | |
| tree | 59aed4e56096ef568537e15695cefc6604e3759a | |
| parent | 21d7ec79ef5b1c23495dd88e5679c1a1d6dd17ae (diff) | |
| download | input-348cbf987ed328682af7d74ce98d9f0e6857f42f.tar.gz | |
Input: mt - annotate struct input_mt with __counted_by
Prepare for the coming implementation by GCC and Clang of the __counted_by
attribute. Flexible array members annotated with __counted_by can have
their accesses bounds-checked at run-time checking via CONFIG_UBSAN_BOUNDS
(for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family
functions).
As found with Coccinelle[1], add __counted_by for struct input_mt.
[1] https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Link: https://lore.kernel.org/r/20230922175036.work.762-kees@kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
| -rw-r--r-- | include/linux/input/mt.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/linux/input/mt.h b/include/linux/input/mt.h index 3b8580bd33c14..2cf89a538b18b 100644 --- a/include/linux/input/mt.h +++ b/include/linux/input/mt.h @@ -47,7 +47,7 @@ struct input_mt { unsigned int flags; unsigned int frame; int *red; - struct input_mt_slot slots[]; + struct input_mt_slot slots[] __counted_by(num_slots); }; static inline void input_mt_set_value(struct input_mt_slot *slot, |