gh0s7/mckernel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ubsan: remove most sprintf calls

Browse Source 
sprintf is implemented as snprintf(..., INT_MAX, ...) which will overflow
the argument pointer for the end, then fix the end to be -1.
This technically works but we know the actual buffer size in all these
call sites, might as well do this properly

Change-Id: I807d09f46a0221f539063fda515e1c504e658d40
This commit is contained in:
Dominique Martinet
2018-12-26 15:08:41 +09:00
parent bc2a444828
commit 4bdd9cf512
3 changed files with 28 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
kernel/procfs.c
View File

@ -35,8 +35,7 @@
#define dprintf(...)
#endif
extern int snprintf(char * buf, size_t size, const char *fmt, ...);
extern int sprintf(char * buf, const char *fmt, ...);
extern int snprintf(char *buf, size_t size, const char *fmt, ...);
extern int sscanf(const char * buf, const char * fmt, ...);
extern int scnprintf(char * buf, size_t size, const char *fmt, ...);
@ -324,6 +323,8 @@ int process_procfs_request(struct ikc_scd_packet *rpacket)
for (cpu = 0; cpu < num_processors; ++cpu) {
ans = snprintf(buf, count, "cpu%d\n", cpu);
if (ans < 0 || ans > count)
goto err;
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0)
goto err;
}
@ -333,7 +334,7 @@ int process_procfs_request(struct ikc_scd_packet *rpacket)
#ifdef POSTK_DEBUG_ARCH_DEP_42 /* /proc/cpuinfo support added. */
else if (!strcmp(p, "cpuinfo")) { /* "/proc/cpuinfo" */
ans = ihk_mc_show_cpuinfo(buf, count, 0, &eof);
if (ans < 0)
if (ans < 0 || ans > count)
goto err;
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0)
goto err;
@ -452,7 +453,8 @@ int process_procfs_request(struct ikc_scd_packet *rpacket)
""
);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
ihk_mc_spinlock_unlock_noirq(&vm->memory_range_lock);
goto err;
}
@ -573,30 +575,35 @@ int process_procfs_request(struct ikc_scd_packet *rpacket)
proc->rgid, proc->egid, proc->sgid, proc->fsgid,
state,
(lockedsize + 1023) >> 10);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
goto err;
}
ans = snprintf(buf, count, "Cpus_allowed:\t%s\n", cpu_bitmask);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
kfree(bitmasks);
goto err;
}
ans = snprintf(buf, count, "Cpus_allowed_list:\t%s\n",
cpu_list);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
kfree(bitmasks);
goto err;
}
ans = snprintf(buf, count, "Mems_allowed:\t%s\n",
numa_bitmask);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
kfree(bitmasks);
goto err;
}
ans = snprintf(buf, count, "Mems_allowed_list:\t%s\n",
numa_list);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0) {
kfree(bitmasks);
goto err;
}
@ -701,7 +708,8 @@ int process_procfs_request(struct ikc_scd_packet *rpacket)
0, 0LL, 0L, 0L // policy...
);
if (buf_add(&buf_top, &buf_cur, buf, ans) < 0)
if (ans < 0 || ans > count ||
buf_add(&buf_top, &buf_cur, buf, ans) < 0)
goto err;
ans = 0;
goto end;