linux-kernel - sysfs_ops show vector: size of buffer not required?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Sun, 24 Jan 2010 13:11:18 +0530
From:	Himanshu Chauhan <himanshu@...metricore.com>
To:	Linux Kernel <linux-kernel@...r.kernel.org>
Cc:	Kernel Newbies <kernelnewbies@...linux.org>,
	Greg Kroah <greg@...ah.com>
Subject: sysfs_ops show vector: size of buffer not required?

Hi All,

The sysfs_ops's show vector doesn't have a size of the
buffer given to the vector, while store on the other hand
has. What is the rationale behind it?

I see most of the implementations doing strcpy in the
show vectors. Ill behaved driver might overwrite the
given buffer when size is not known. Should this be addressed
by providing the buffer size along with the buffer pointer?

Thanks

Best Regards
Himanshu
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/