linux-kernel - [PATCH 0/5] usb: Replace {v}snprintf() variants with safer alternatives

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20231130105459.3208986-1-lee@kernel.org>
Date:   Thu, 30 Nov 2023 10:54:34 +0000
From:   Lee Jones <lee@...nel.org>
To:     lee@...nel.org
Cc:     linux-kernel@...r.kernel.org,
        Damien Bergamini <damien.bergamini@...e.fr>,
        Dmitry Bogdanov <d.bogdanov@...ro.com>,
        Feng-Hsin Chiang <john453@...aday-tech.com>,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        Linus Walleij <linus.walleij@...aro.org>,
        linux-usb@...r.kernel.org,
        "Martin K. Petersen" <martin.petersen@...cle.com>,
        Matthieu CASTET <castet.matthieu@...e.fr>,
        Pawel Laszczak <pawell@...ence.com>,
        Po-Yu Chuang <ratbert.chuang@...il.com>,
        Stanislaw Gruszka <stf_xl@...pl>,
        Yuan-Hsin Chen <yhchen@...aday-tech.com>
Subject: [PATCH 0/5] usb: Replace {v}snprintf() variants with safer alternatives

This series is part of an effort to rid {v}snprintf() where possible.

For a far better description of the problem than I could author, see
Jon's write-up on LWN [1] and/or Alex's on the Kernel Self Protection
Project [1].

[0] https://lwn.net/Articles/69419/
[1] https://github.com/KSPP/linux/issues/105

Lee Jones (5):
  usb: atm: Remove snprintf() from sysfs call-backs and replace with
    sysfs_emit()
  usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
  usb: fotg210-hcd: Replace snprintf() with the safer scnprintf()
    variant
  usb: gadget: Remove snprintf() from sysfs call-backs and replace with
    sysfs_emit()
  usb: gadget: f_tcm: Remove snprintf() from sysfs call-backs and
    replace with sysfs_emit()

 drivers/usb/atm/ueagle-atm.c        |  16 +-
 drivers/usb/cdns3/cdnsp-debug.h     | 354 ++++++++++++++--------------
 drivers/usb/fotg210/fotg210-hcd.c   |  12 +-
 drivers/usb/gadget/configfs.c       |   2 +-
 drivers/usb/gadget/function/f_tcm.c |   4 +-
 5 files changed, 192 insertions(+), 196 deletions(-)

Cc: Damien Bergamini <damien.bergamini@...e.fr>
Cc: Dmitry Bogdanov <d.bogdanov@...ro.com>
Cc: Feng-Hsin Chiang <john453@...aday-tech.com>
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Cc: Linus Walleij <linus.walleij@...aro.org>
Cc: linux-usb@...r.kernel.org
Cc: "Martin K. Petersen" <martin.petersen@...cle.com>
Cc: Matthieu CASTET <castet.matthieu@...e.fr>
Cc: Pawel Laszczak <pawell@...ence.com>
Cc: Po-Yu Chuang <ratbert.chuang@...il.com>
Cc: Stanislaw Gruszka <stf_xl@...pl>
Cc: Yuan-Hsin Chen <yhchen@...aday-tech.com>

-- 
2.43.0.rc1.413.gea7ed67945-goog