Messages in this thread | | | From | Eric Sesterhenn <> | Subject | [PATCH 0/7] Graceful snprintf truncation handling | Date | Wed, 11 Oct 2017 10:28:18 +0200 |
| |
snprintf returns the number of bytes required to print the full string, even if the string is truncated. If this return value is used for calculations, the size parameter might underflow as shown e.g. in afdb05e9d61905220f09268535235288e6ba3a16 This causes a warning in the next snprintf iteration, since it checks that size < INT_MAX. These patches prevent these warnings.
Eric Sesterhenn (7): Handle snprintf calculations in x_tables Handle snprintf calculation in stackglue Fix snprintf calculation in filecheck Prevent u32_format_array from returning a size too big Handle snprintf calulation more graceful in v9fs Handle snprintf truncation in msm_perf more gracefully Handle snprintf truncation more graceful in thunderx_edac
drivers/edac/thunderx_edac.c | 2 ++ drivers/gpu/drm/msm/msm_perf.c | 12 +++++++----- fs/9p/v9fs.c | 4 ++++ fs/debugfs/file.c | 3 +++ fs/ocfs2/filecheck.c | 2 +- fs/ocfs2/stackglue.c | 2 +- net/netfilter/x_tables.c | 2 ++ 7 files changed, 20 insertions(+), 7 deletions(-)
-- Eric Sesterhenn (Principal Security Consultant) X41 D-SEC GmbH, Dennewartstr. 25-27, D-52068 Aachen T: +49 241 9809418-0, Fax: -9 Unternehmenssitz: Aachen, Amtsgericht Aachen: HRB19989 Geschäftsführer: Markus Vervier
[unhandled content-type:application/pgp-signature] | |