The Linux Kernel Mailing List
 help / color / mirror / Atom feed
* [PATCH next] drivers/infiniband/hw/mlx5/data_direct: Use strscpy() to copy strings into arrays
@ 2026-06-08  9:54 david.laight.linux
  2026-06-09 19:01 ` Jason Gunthorpe
  0 siblings, 1 reply; 2+ messages in thread
From: david.laight.linux @ 2026-06-08  9:54 UTC (permalink / raw)
  To: Kees Cook, linux-hardening, linux-kernel, linux-rdma
  Cc: Arnd Bergmann, Jason Gunthorpe, Leon Romanovsky, David Laight

From: David Laight <david.laight.linux@gmail.com>

Replacing strcpy() with strscpy() ensures that overflow of the target
buffer cannot happen.

Signed-off-by: David Laight <david.laight.linux@gmail.com>
---
This is one of a group of patches that remove potentially unbounded
strcpy() calls.

They are mostly replaced by strscpy() or, when strlen() has just been
called, with memcpy() (usually including the '\0').

Calls with copy string literals into arrays are left unchanged.
They are safe and easily detected as such.

The changes were made by getting the compiler to detect the calls and
then fixing the code by hand.

Note that all the changes are only compile tested.

Some Makefiles were changed to allow files to contain strcpy().
As well as 'difficult to fix' files, this included 'show' functions
as they really need to use sysfs_emit() or seq_printf().

All the patches are being sent individually to avoid very long cc lists.
Apologies for the terse commit messages and likely unexpected tags.
(There are about 100 patches in total.)

 drivers/infiniband/hw/mlx5/data_direct.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/infiniband/hw/mlx5/data_direct.c b/drivers/infiniband/hw/mlx5/data_direct.c
index 8e89dbe40c23..d57484245c38 100644
--- a/drivers/infiniband/hw/mlx5/data_direct.c
+++ b/drivers/infiniband/hw/mlx5/data_direct.c
@@ -88,7 +88,7 @@ int mlx5_data_direct_ib_reg(struct mlx5_ib_dev *ibdev, char *vuid)
 		return -ENOMEM;
 
 	reg->ibdev = ibdev;
-	strcpy(reg->vuid, vuid);
+	strscpy(reg->vuid, vuid);
 
 	mutex_lock(&mlx5_data_direct_mutex);
 	list_for_each_entry(dev, &mlx5_data_direct_dev_list, list) {
-- 
2.39.5


^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [PATCH next] drivers/infiniband/hw/mlx5/data_direct: Use strscpy() to copy strings into arrays
  2026-06-08  9:54 [PATCH next] drivers/infiniband/hw/mlx5/data_direct: Use strscpy() to copy strings into arrays david.laight.linux
@ 2026-06-09 19:01 ` Jason Gunthorpe
  0 siblings, 0 replies; 2+ messages in thread
From: Jason Gunthorpe @ 2026-06-09 19:01 UTC (permalink / raw)
  To: david.laight.linux
  Cc: Kees Cook, linux-hardening, linux-kernel, linux-rdma,
	Arnd Bergmann, Leon Romanovsky

On Mon, Jun 08, 2026 at 10:54:57AM +0100, david.laight.linux@gmail.com wrote:
> From: David Laight <david.laight.linux@gmail.com>
> 
> Replacing strcpy() with strscpy() ensures that overflow of the target
> buffer cannot happen.
> 
> Signed-off-by: David Laight <david.laight.linux@gmail.com>
> ---
>  drivers/infiniband/hw/mlx5/data_direct.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Applied to for-next

Thanks
Jason

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-06-09 19:01 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-06-08  9:54 [PATCH next] drivers/infiniband/hw/mlx5/data_direct: Use strscpy() to copy strings into arrays david.laight.linux
2026-06-09 19:01 ` Jason Gunthorpe

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox