Linux CXL
 help / color / mirror / Atom feed
From: sashiko-bot@kernel.org
To: alistair23@gmail.com
Cc: linux-pci@vger.kernel.org, linux-cxl@vger.kernel.org, ojeda@kernel.org
Subject: Re: [PATCH v2 20/21] rust: allow extracting the buffer from a CString
Date: Tue, 23 Jun 2026 05:13:52 +0000	[thread overview]
Message-ID: <20260623051352.E33051F000E9@smtp.kernel.org> (raw)
In-Reply-To: <20260623045406.2589547-21-alistair.francis@wdc.com>

Thank you for your contribution! Sashiko AI review found 2 potential issue(s) to consider:
- [Medium] The `into_vec` method diverges from Rust's standard library `CString` naming conventions, obscuring the presence of the NUL terminator and creating a dangerous API trap.
- [Low] Typo in the commit message: 'aroud' instead of 'around'.
--

commit a1ef2ecd44b6df9c9b3d012bdcb8952ab17a0f53
Author: Alistair Francis <alistair@alistair23.me>

rust: allow extracting the buffer from a CString

This patch introduces a method to consume a CString and return its
underlying KVec buffer. It allows users to create a CString and then
extract the internal byte vector for further use.

> The kernel CString is a wrapper aroud a KVec. This patch allows

[Severity: Low]
This isn't a bug, but there is a typo in the commit message: "aroud"
should be "around".

> diff --git a/rust/kernel/str.rs b/rust/kernel/str.rs
> --- a/rust/kernel/str.rs
> +++ b/rust/kernel/str.rs
> @@ -870,6 +870,12 @@ pub fn try_from_fmt(args: fmt::Arguments<'_>) -> Result<Self, Error> {
>          // exist in the buffer.
>          Ok(Self { buf })
>      }
> +
> +    /// Return the internal buffer while consuming the original [`CString`]
> +    #[inline]
> +    pub fn into_vec(self) -> KVec<u8> {
> +        self.buf
> +    }

[Severity: Medium]
Does this naming diverge from standard Rust library conventions and obscure
the presence of the NUL terminator?

In the standard library, extracting the underlying buffer from a CString
typically strips the NUL byte with a method like into_bytes(), while the
method that keeps it is explicitly named into_bytes_with_nul(). 

Calling this into_vec() might mislead callers into assuming the NUL byte is
already stripped, which could cause developers to unintentionally include a
NUL byte in buffers or calculate incorrect offsets.

Could this be renamed to into_bytes_with_nul() to match standard
conventions and clarify the buffer's contents?

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20260623045406.2589547-1-alistair.francis@wdc.com?part=20

  reply	other threads:[~2026-06-23  5:13 UTC|newest]

Thread overview: 43+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-06-23  4:53 [PATCH v2 00/21] lib: Rust implementation of SPDM alistair23
2026-06-23  4:53 ` [PATCH v2 01/21] rust: transmute: add `cast_slice[_mut]` functions alistair23
2026-06-23  5:05   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 02/21] rust: create basic untrusted data API alistair23
2026-06-23  5:09   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 03/21] rust: validate: add `Validate` trait alistair23
2026-06-23  5:10   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 04/21] X.509: Make certificate parser public alistair23
2026-06-23  5:03   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 05/21] X.509: Parse Subject Alternative Name in certificates alistair23
2026-06-23  5:07   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 06/21] X.509: Move certificate length retrieval into new helper alistair23
2026-06-23  5:02   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 07/21] rust: add bindings for hash.h alistair23
2026-06-23  7:01   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 08/21] rust: error: impl From<FromBytesWithNulError> for Kernel Error alistair23
2026-06-23  5:01   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 09/21] lib: rspdm: Initial commit of Rust SPDM alistair23
2026-06-23  5:09   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 10/21] PCI/TSM: Rename pf0 to host alistair23
2026-06-23  5:12   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 11/21] PCI/TSM: Support connecting to PCIe CMA devices alistair23
2026-06-23  5:16   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 12/21] PCI/CMA: Add a PCI TSM CMA driver using SPDM alistair23
2026-06-23  5:07   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 13/21] PCI/CMA: Validate Subject Alternative Name in certificates alistair23
2026-06-23  5:07   ` sashiko-bot
2026-06-23  4:53 ` [PATCH v2 14/21] lib: rspdm: Support SPDM get_version alistair23
2026-06-23  5:10   ` sashiko-bot
2026-06-23  4:54 ` [PATCH v2 15/21] lib: rspdm: Support SPDM get_capabilities alistair23
2026-06-23  5:09   ` sashiko-bot
2026-06-23  4:54 ` [PATCH v2 16/21] lib: rspdm: Support SPDM negotiate_algorithms alistair23
2026-06-23  5:17   ` sashiko-bot
2026-06-23  4:54 ` [PATCH v2 17/21] lib: rspdm: Support SPDM get_digests alistair23
2026-06-23  5:17   ` sashiko-bot
2026-06-23  4:54 ` [PATCH v2 18/21] lib: rspdm: Support SPDM get_certificate alistair23
2026-06-23  5:20   ` sashiko-bot
2026-06-23  4:54 ` [PATCH v2 19/21] lib: rspdm: Support SPDM certificate validation alistair23
2026-06-23  5:19   ` sashiko-bot
2026-06-23  4:54 ` [PATCH v2 20/21] rust: allow extracting the buffer from a CString alistair23
2026-06-23  5:13   ` sashiko-bot [this message]
2026-06-23  4:54 ` [PATCH v2 21/21] lib: rspdm: Support SPDM challenge alistair23
2026-06-23  5:21   ` sashiko-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260623051352.E33051F000E9@smtp.kernel.org \
    --to=sashiko-bot@kernel.org \
    --cc=alistair23@gmail.com \
    --cc=linux-cxl@vger.kernel.org \
    --cc=linux-pci@vger.kernel.org \
    --cc=ojeda@kernel.org \
    --cc=sashiko-reviews@lists.linux.dev \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox