diff options
| author | Azeem Shaikh <azeemshaikh38@gmail.com> | 2023-07-03 16:06:41 +0000 |
|---|---|---|
| committer | Richard Weinberger <richard@nod.at> | 2023-08-19 22:24:39 +0200 |
| commit | f5ff432d96e17a8fdb1962b73cea3823ebd701e8 (patch) | |
| tree | 8012bd1df850a5db1c95fe861d1f13e47217317a | |
| parent | 2ccdd1b13c591d306f0401d98dedc4bdcd02b421 (diff) | |
| download | linux-f5ff432d96e17a8fdb1962b73cea3823ebd701e8.tar.gz | |
um: Remove strlcpy usage
strlcpy() reads the entire source buffer first.
This read may exceed the destination size limit.
This is both inefficient and can lead to linear read
overflows if a source string is not NUL-terminated [1].
In an effort to remove strlcpy() completely [2], replace
strlcpy() here with strscpy().
No return values were used, so direct replacement is safe.
[1] https://www.kernel.org/doc/html/latest/process/deprecated.html#strlcpy
[2] https://github.com/KSPP/linux/issues/89
Signed-off-by: Azeem Shaikh <azeemshaikh38@gmail.com>
[rw: Massaged subject]
Signed-off-by: Richard Weinberger <richard@nod.at>
| -rw-r--r-- | arch/um/include/shared/user.h | 1 | ||||
| -rw-r--r-- | arch/um/os-Linux/umid.c | 6 |
2 files changed, 3 insertions, 4 deletions
diff --git a/arch/um/include/shared/user.h b/arch/um/include/shared/user.h index 0347a190429cd4..981e11d8e02543 100644 --- a/arch/um/include/shared/user.h +++ b/arch/um/include/shared/user.h @@ -50,7 +50,6 @@ static inline int printk(const char *fmt, ...) #endif extern int in_aton(char *str); -extern size_t strlcpy(char *, const char *, size_t); extern size_t strlcat(char *, const char *, size_t); extern size_t strscpy(char *, const char *, size_t); diff --git a/arch/um/os-Linux/umid.c b/arch/um/os-Linux/umid.c index 7a1abb82993076..288c422bfa9647 100644 --- a/arch/um/os-Linux/umid.c +++ b/arch/um/os-Linux/umid.c @@ -40,7 +40,7 @@ static int __init make_uml_dir(void) __func__); goto err; } - strlcpy(dir, home, sizeof(dir)); + strscpy(dir, home, sizeof(dir)); uml_dir++; } strlcat(dir, uml_dir, sizeof(dir)); @@ -243,7 +243,7 @@ int __init set_umid(char *name) if (strlen(name) > UMID_LEN - 1) return -E2BIG; - strlcpy(umid, name, sizeof(umid)); + strscpy(umid, name, sizeof(umid)); return 0; } @@ -262,7 +262,7 @@ static int __init make_umid(void) make_uml_dir(); if (*umid == '\0') { - strlcpy(tmp, uml_dir, sizeof(tmp)); + strscpy(tmp, uml_dir, sizeof(tmp)); strlcat(tmp, "XXXXXX", sizeof(tmp)); fd = mkstemp(tmp); if (fd < 0) { |