bianbu-repo-mirror/bianbu-linux-6.6
1
0
Fork 0
mirror of https://gitee.com/bianbu-linux/linux-6.6 synced 2025-04-24 14:07:52 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

net: hns3: fix strncpy() not using dest-buf length as length issue

Browse source 
Now, strncpy() in hns3_dbg_fill_content() use src-length as copy-length,
it may result in dest-buf overflow.

This patch is to fix intel compile warning for csky-linux-gcc (GCC) 12.1.0
compiler.

The warning reports as below:

hclge_debugfs.c:92:25: warning: 'strncpy' specified bound depends on
the length of the source argument [-Wstringop-truncation]

strncpy(pos, items[i].name, strlen(items[i].name));

hclge_debugfs.c:90:25: warning: 'strncpy' output truncated before
terminating nul copying as many bytes from a string as its length
[-Wstringop-truncation]

strncpy(pos, result[i], strlen(result[i]));

strncpy() use src-length as copy-length, it may result in
dest-buf overflow.

So,this patch add some values check to avoid this issue.

Signed-off-by: Hao Chen <chenhao418@huawei.com>
Reported-by: kernel test robot <lkp@intel.com>
Closes: https://lore.kernel.org/lkml/202207170606.7WtHs9yS-lkp@intel.com/T/
Signed-off-by: Hao Lan <lanhao@huawei.com>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
This commit is contained in:
Hao Chen 2023-06-21 20:33:08 +08:00 • committed by Paolo Abeni
parent 9b476494da
commit 1cf3d5567f
2 changed files with 49 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

33
drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c
View file

@ -438,19 +438,36 @@ static void hns3_dbg_fill_content(char *content, u16 len,
const struct hns3_dbg_item *items, const struct hns3_dbg_item *items,
const char **result, u16 size) const char **result, u16 size)
{ {
#define HNS3_DBG_LINE_END_LEN 2
char *pos = content; char *pos = content;
u16 item_len;
u16 i; u16 i;
memset(content, ' ', len); if (!len) {
for (i = 0; i < size; i++) { return;
if (result) } else if (len <= HNS3_DBG_LINE_END_LEN) {
strncpy(pos, result[i], strlen(result[i])); *pos++ = '\0';
else return;
strncpy(pos, items[i].name, strlen(items[i].name));
pos += strlen(items[i].name) + items[i].interval;
} }
memset(content, ' ', len);
len -= HNS3_DBG_LINE_END_LEN;
for (i = 0; i < size; i++) {
item_len = strlen(items[i].name) + items[i].interval;
if (len < item_len)
break;
if (result) {
if (item_len < strlen(result[i]))
break;
strscpy(pos, result[i], strlen(result[i]));
} else {
strscpy(pos, items[i].name, strlen(items[i].name));
}
pos += item_len;
len -= item_len;
}
*pos++ = '\n'; *pos++ = '\n';
*pos++ = '\0'; *pos++ = '\0';
} }

29
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c
View file

@ -88,16 +88,35 @@ static void hclge_dbg_fill_content(char *content, u16 len,
const struct hclge_dbg_item *items, const struct hclge_dbg_item *items,
const char **result, u16 size) const char **result, u16 size)
{ {
#define HCLGE_DBG_LINE_END_LEN 2
char *pos = content; char *pos = content;
u16 item_len;
u16 i; u16 i;
if (!len) {
return;
} else if (len <= HCLGE_DBG_LINE_END_LEN) {
*pos++ = '\0';
return;
}
memset(content, ' ', len); memset(content, ' ', len);
len -= HCLGE_DBG_LINE_END_LEN;
for (i = 0; i < size; i++) { for (i = 0; i < size; i++) {
if (result) item_len = strlen(items[i].name) + items[i].interval;
strncpy(pos, result[i], strlen(result[i])); if (len < item_len)
else break;
strncpy(pos, items[i].name, strlen(items[i].name));
pos += strlen(items[i].name) + items[i].interval; if (result) {
if (item_len < strlen(result[i]))
break;
strscpy(pos, result[i], strlen(result[i]));
} else {
strscpy(pos, items[i].name, strlen(items[i].name));
}
pos += item_len;
len -= item_len;
} }
*pos++ = '\n'; *pos++ = '\n';
*pos++ = '\0'; *pos++ = '\0';