linux-kernel - [PATCH 00/12] usb: Replace {v}snprintf() variants with safer alternatives

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20231213164246.1021885-1-lee@kernel.org>
Date:   Wed, 13 Dec 2023 16:42:29 +0000
From:   Lee Jones <lee@...nel.org>
To:     lee@...nel.org, gregkh@...uxfoundation.org
Cc:     linux-kernel@...r.kernel.org, linux-usb@...r.kernel.org,
        Alan Stern <stern@...land.harvard.edu>,
        Alexandre Belloni <alexandre.belloni@...tlin.com>,
        Andrzej Pietrasiewicz <andrzejtp2010@...il.com>,
        Bryan Wu <cooloney@...nel.org>,
        Claudiu Beznea <claudiu.beznea@...on.dev>,
        Cristian Birsan <cristian.birsan@...rochip.com>,
        Daniel Scally <dan.scally@...asonboard.com>,
        Hema HK <hemahk@...com>, James Gruber <jimmyjgruber@...il.com>,
        Jaswinder Singh <jaswinder.singh@...aro.org>,
        Julian Scheel <julian@...st.de>,
        Laurent Pinchart <laurent.pinchart@...asonboard.com>,
        linux-arm-kernel@...ts.infradead.org,
        Nicolas Ferre <nicolas.ferre@...rochip.com>,
        Pawel Laszczak <pawell@...ence.com>,
        Ruslan Bilovol <ruslan.bilovol@...il.com>,
        Tomoki Sekiyama <tomoki.sekiyama@...il.com>,
        usb-storage@...ts.one-eyed-alien.net,
        Yadwinder Singh <yadi.brar01@...il.com>
Subject: [PATCH 00/12] usb: Replace {v}snprintf() variants with safer alternatives

This series is part of an effort to rid {v}snprintf() where possible.

For a far better description of the problem than I could author, see
Jon's write-up on LWN [1] and/or Alex's on the Kernel Self Protection
Project [1].

[0] https://lwn.net/Articles/69419/
[1] https://github.com/KSPP/linux/issues/105

Lee Jones (12):
  usb: gadget: configfs: Replace snprintf() with the safer scnprintf()
    variant
  usb: gadget: f_uac1: Replace snprintf() with the safer scnprintf()
    variant
  usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf()
    variant
  usb: gadget: uvc: Replace snprintf() with the safer scnprintf()
    variant
  usb: gadget: udc: atmel: Replace snprintf() with the safer scnprintf()
    variant
  usb: cdns2: Replace snprintf() with the safer scnprintf() variant
  usb: host: max3421-hcd: Replace snprintf() with the safer scnprintf()
    variant
  usb: yurex: Replace snprintf() with the safer scnprintf() variant
  usb: mon_stat: Replace snprintf() with the safer scnprintf() variant
  usb: mon_text: Replace snprintf() with the safer scnprintf() variant
  usb: phy: twl6030: Remove snprintf() from sysfs call-backs and replace
    with sysfs_emit()
  usb: storage: Remove snprintf() from sysfs call-backs and replace with
    sysfs_emit()

 drivers/usb/gadget/configfs.c              |  11 +-
 drivers/usb/gadget/function/f_uac1.c       |   6 +-
 drivers/usb/gadget/function/f_uac2.c       |   6 +-
 drivers/usb/gadget/function/uvc_configfs.c |   2 +-
 drivers/usb/gadget/udc/atmel_usba_udc.c    |   3 +-
 drivers/usb/gadget/udc/cdns2/cdns2-debug.h | 138 ++++++++++-----------
 drivers/usb/host/max3421-hcd.c             |  18 +--
 drivers/usb/misc/yurex.c                   |  12 +-
 drivers/usb/mon/mon_stat.c                 |   6 +-
 drivers/usb/mon/mon_text.c                 |  28 +----
 drivers/usb/phy/phy-twl6030-usb.c          |   8 +-
 drivers/usb/storage/sierra_ms.c            |  16 +--
 12 files changed, 120 insertions(+), 134 deletions(-)

Cc: Alan Stern <stern@...land.harvard.edu>
Cc: Alexandre Belloni <alexandre.belloni@...tlin.com>
Cc: Andrzej Pietrasiewicz <andrzejtp2010@...il.com>
Cc: Bryan Wu <cooloney@...nel.org>
Cc: Claudiu Beznea <claudiu.beznea@...on.dev>
Cc: Cristian Birsan <cristian.birsan@...rochip.com>
Cc: Daniel Scally <dan.scally@...asonboard.com>
Cc: Hema HK <hemahk@...com>
Cc: James Gruber <jimmyjgruber@...il.com>
Cc: Jaswinder Singh <jaswinder.singh@...aro.org>
Cc: Julian Scheel <julian@...st.de>
Cc: Laurent Pinchart <laurent.pinchart@...asonboard.com>
Cc: linux-arm-kernel@...ts.infradead.org
Cc: Nicolas Ferre <nicolas.ferre@...rochip.com>
Cc: Pawel Laszczak <pawell@...ence.com>
Cc: Ruslan Bilovol <ruslan.bilovol@...il.com>
Cc: Tomoki Sekiyama <tomoki.sekiyama@...il.com>
Cc: usb-storage@...ts.one-eyed-alien.net
Cc: Yadwinder Singh <yadi.brar01@...il.com>
-- 
2.43.0.472.g3155946c3a-goog