linux-kernel - RE: [PATCH] EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <SJ1PR11MB6083F48A0A17F85632D08643FC57A@SJ1PR11MB6083.namprd11.prod.outlook.com>
Date: Tue, 15 Jul 2025 17:16:21 +0000
From: "Luck, Tony" <tony.luck@...el.com>
To: Wang Haoran <haoranwangsec@...il.com>, "bp@...en8.de" <bp@...en8.de>
CC: "james.morse@....com" <james.morse@....com>, "mchehab@...nel.org"
	<mchehab@...nel.org>, "rric@...nel.org" <rric@...nel.org>,
	"linux-edac@...r.kernel.org" <linux-edac@...r.kernel.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: RE: [PATCH] EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer
 handling

> snprintf() is fragile when its return value
> will be used to append additional data to a
> buffer. Use scnprintf() instead.
>
> Signed-off-by: Wang Haoran <haoranwangsec@...il.com>

Thanks. Patch applied to the https://git.kernel.org/pub/scm/linux/kernel/git/ras/ras.git
repo. It should be picked up by intel-next soon.

It will merge to Linus mainline in the v6.17 merge window in a couple of weeks.

-Tony