Patch "ARM: omap2+: fixing wrong strcat for Non-NULL terminated string" has been added to the 4.9-stable tree
Subsystems (5)
This is a note to let you know that I've just added the patch titled
ARM: omap2+: fixing wrong strcat for Non-NULL terminated string
to the 4.9-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
arm-omap2-fixing-wrong-strcat-for-non-null-terminated-string.patch
and it can be found in the queue-4.9 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From foo@baz Fri Aug 4 13:32:40 PDT 2017
From: Maninder Singh <[email protected]>
Date: Thu, 8 Dec 2016 09:40:30 +0530
Subject: ARM: omap2+: fixing wrong strcat for Non-NULL terminated string
From: Maninder Singh <[email protected]>
[ Upstream commit 5066d5296ff2db20625e5f46e7338872c90c649f ]
Issue caught with static analysis tool:
"Dangerous usage of 'name' (strncpy doesn't always 0-terminate it)"
Use strlcpy _includes_ the NUL terminator, and strlcat() which ensures that it won't overflow the buffer.
--- arch/arm/mach-omap2/omap_hwmod.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)
arch/arm/mach-omap2/omap_hwmod.c +4 -4
@@ -790,14 +790,14 @@ static int _init_main_clk(struct omap_hwint ret =0 ;char name[MOD_CLK_MAX_NAME_LEN ];struct clk *clk; +static const char modck[] ="_mod_ck" ; -/* +7 magic comes from '_mod_ck' suffix */ -if (strlen (oh->name) +7 >MOD_CLK_MAX_NAME_LEN ) +if (strlen (oh->name) >=MOD_CLK_MAX_NAME_LEN -strlen (modck))pr_warn ("%s: warning: cropping name for %s\n" , __func__, oh->name); -strncpy (name, oh->name,MOD_CLK_MAX_NAME_LEN -7 ); -strcat (name,"_mod_ck" ); +strlcpy (name, oh->name,MOD_CLK_MAX_NAME_LEN -strlen (modck)); +strlcat (name, modck,MOD_CLK_MAX_NAME_LEN ); clk =clk_get (NULL , name);if (!IS_ERR (clk)) {
Patches currently in stable-queue which might be from [email protected] are
queue-4.9/arm-omap2-fixing-wrong-strcat-for-non-null-terminated-string.patch