linux-kernel - Re: [PATCH v1 3/6] params: Do not go over the limit when getting the string length

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <ZQCCrfbtH16KjzCE@smile.fi.intel.com>
Date:   Tue, 12 Sep 2023 18:24:29 +0300
From:   Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
To:     linux-kernel@...r.kernel.org, Kees Cook <keescook@...omium.org>
Cc:     Luis Chamberlain <mcgrof@...nel.org>
Subject: Re: [PATCH v1 3/6] params: Do not go over the limit when getting the
 string length

On Tue, Sep 12, 2023 at 06:05:48PM +0300, Andy Shevchenko wrote:
> We can use strnlen() even on early stages and it prevents from
> going over the string boundaries in case it's already too long.

Should have Cc'ed this and next patch to Kees...

-- 
With Best Regards,
Andy Shevchenko