Messages in this thread | | | Date | Tue, 8 Mar 2016 15:07:23 -0800 | Subject | Re: [RFC 0/7] eliminate snprintf with overlapping src and dst | From | Kees Cook <> |
| |
On Tue, Mar 8, 2016 at 12:40 PM, Rasmus Villemoes <linux@rasmusvillemoes.dk> wrote: > Doing snprintf(buf, len, "%s...", buf, ...) for appending to a buffer > currently works, but it is somewhat fragile, and any other overlap > between source and destination buffers would be a definite bug. This > is an attempt at eliminating the relatively few occurences of this > pattern in the kernel.
Can we add a gcc plugin to detect these and refuse to compile when they're found?
-Kees
-- Kees Cook Chrome OS & Brillo Security
| |