diff options
| author | Kees Cook <keescook@chromium.org> | 2023-09-15 13:14:14 -0700 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2023-09-20 14:22:01 +0200 |
| commit | db7fcc884d8a1e8265a87306e728c3d3239b0ca2 (patch) | |
| tree | eacfb32a0d5e398bdd257196e14e2cb160b04f13 /fs | |
| parent | 8287474aa5ffb41df52552c4ae4748e791d2faf2 (diff) | |
| download | linux-db7fcc884d8a1e8265a87306e728c3d3239b0ca2.tar.gz | |
aio: Annotate struct kioctx_table with __counted_by
Prepare for the coming implementation by GCC and Clang of the __counted_by
attribute. Flexible array members annotated with __counted_by can have
their accesses bounds-checked at run-time checking via CONFIG_UBSAN_BOUNDS
(for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family
functions).
As found with Coccinelle[1], add __counted_by for struct kioctx_table.
[1] https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci
Cc: Benjamin LaHaise <bcrl@kvack.org>
Cc: Alexander Viro <viro@zeniv.linux.org.uk>
Cc: Christian Brauner <brauner@kernel.org>
Cc: linux-aio@kvack.org
Cc: linux-fsdevel@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: "Gustavo A. R. Silva" <gustavoars@kernel.org>
Message-Id: <20230915201413.never.881-kees@kernel.org>
Signed-off-by: Christian Brauner <brauner@kernel.org>
Diffstat (limited to 'fs')
| -rw-r--r-- | fs/aio.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/aio.c b/fs/aio.c index a4c2a6bac72ce9..f8589caef9c10e 100644 --- a/fs/aio.c +++ b/fs/aio.c @@ -80,7 +80,7 @@ struct aio_ring { struct kioctx_table { struct rcu_head rcu; unsigned nr; - struct kioctx __rcu *table[]; + struct kioctx __rcu *table[] __counted_by(nr); }; struct kioctx_cpu { |