linux-kernel - Re: [PATCH linux-next] tools/tracing: fix application of sizeof to pointer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Fri, 20 Aug 2021 10:24:52 -0400
From:   Steven Rostedt <rostedt@...dmis.org>
To:     <Viktor.Rosendahl@....de>
Cc:     <jing.yangyang@....com.cn>, <cgel.zte@...il.com>,
        <vulab@...as.ac.cn>, <colin.king@...onical.com>,
        <linux-kernel@...r.kernel.org>, <zealci@....com.cn>
Subject: Re: [PATCH linux-next] tools/tracing: fix application of sizeof to
 pointer

On Fri, 20 Aug 2021 09:00:09 +0000
<Viktor.Rosendahl@....de> wrote:

> > Reported-by: Zeal Robot <zealci@....com.cn>
> > Signed-off-by: jing yangyang <jing.yangyang@....com.cn>
> > ---
> >  tools/tracing/latency/latency-collector.c | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> > 
> > diff --git a/tools/tracing/latency/latency-collector.c
> > b/tools/tracing/latency/latency-collector.c
> > index 3a2e6bb..64d531d 100644
> > --- a/tools/tracing/latency/latency-collector.c
> > +++ b/tools/tracing/latency/latency-collector.c
> > @@ -1538,7 +1538,7 @@ static void tracing_loop(void)
> >  				mutex_lock(&print_mtx);
> >  				check_signals();
> >  				write_or_die(fd_stdout, queue_full_warning,
> > -					     sizeof(queue_full_warning));
> > +					     sizeof(*queue_full_warning));  
> 
> The old code would give a size of 8, i.e. the size of the pointer. Your
> suggestion will give a size of 1, i.e. the size of the first character of the
> error message. So instead of ouputing "Could no" we would only write out "C".

Which is obviously incorrect to use sizeof(*queue_full_warning), and
just makes the current bug into an even worse bug.

> 
> What we want is the length of the error message. This could be achieved in two
> ways:
> 
> 1. By changing the sizeof(queue_full_warning) to strlen(queue_full_warning).
> 
> 2. By changing the definition of queue_full_warning to be an array, in that case
> we would like to use sizeof(queue_full_warning) - 1, the "- 1" comes from the
> fact that we don't want to write out the terminating null character.
> 
> I think the first approach with strlen() is the better solution because it's
> shorter and modern compilers will do the strlen() calculation of constant
> strings at compile time anyway.

Either approach is fine. But it needs to fix the issue, and not just
blindly follow what Coccinelle tells you. Tools like Coccinelle can
help point you where a problem is. But people still need to use their
brain to actually fix the issue.

-- Steve