mirror of
https://github.com/torvalds/linux.git
synced 2024-11-23 04:31:50 +00:00
166db01007
strncpy() is an ambiguous and potentially dangerous interface [1]. We should prefer more robust and less ambiguous alternatives. @query is marked as __nonstring and doesn't need to be NUL-terminated. Since we are doing a string to memory copy, we can use the aptly named "strtomem" -- specifically, the "pad" variant to also ensure NUL-padding throughout the destination buffer. Link: https://www.kernel.org/doc/html/latest/process/deprecated.html#strncpy-on-nul-terminated-strings [1] Link: https://manpages.debian.org/testing/linux-manual-4.8/strscpy.9.en.html [2] Link: https://github.com/KSPP/linux/issues/90 Cc: linux-hardening@vger.kernel.org Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: Justin Stitt <justinstitt@google.com> Link: https://lore.kernel.org/r/20240319-strncpy-drivers-soc-qcom-cmd-db-c-v3-1-aeb5c5180c32@google.com Signed-off-by: Bjorn Andersson <andersson@kernel.org> |
||
---|---|---|
.. | ||
amlogic | ||
apple | ||
aspeed | ||
atmel | ||
bcm | ||
canaan | ||
dove | ||
fsl | ||
fujitsu | ||
gemini | ||
hisilicon | ||
imx | ||
ixp4xx | ||
lantiq | ||
litex | ||
loongson | ||
mediatek | ||
microchip | ||
nuvoton | ||
pxa | ||
qcom | ||
renesas | ||
rockchip | ||
samsung | ||
sunxi | ||
tegra | ||
ti | ||
ux500 | ||
versatile | ||
xilinx | ||
Kconfig | ||
Makefile |