Skip to content

Commit 883f8fe

Browse files
azeemshaikh38kees
authored andcommitted
vboxsf: Replace all non-returning strlcpy with strscpy
strlcpy() reads the entire source buffer first. This read may exceed the destination size limit. This is both inefficient and can lead to linear read overflows if a source string is not NUL-terminated [1]. In an effort to remove strlcpy() completely [2], replace strlcpy() here with strscpy(). No return values were used, so direct replacement is safe. [1] https://www.kernel.org/doc/html/latest/process/deprecated.html#strlcpy [2] KSPP#89 Signed-off-by: Azeem Shaikh <azeemshaikh38@gmail.com> Reviewed-by: Hans de Goede <hdegoede@redhat.com> Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20230510211146.3486600-1-azeemshaikh38@gmail.com
1 parent 8ca25e0 commit 883f8fe

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

fs/vboxsf/super.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -176,7 +176,7 @@ static int vboxsf_fill_super(struct super_block *sb, struct fs_context *fc)
176176
}
177177
folder_name->size = size;
178178
folder_name->length = size - 1;
179-
strlcpy(folder_name->string.utf8, fc->source, size);
179+
strscpy(folder_name->string.utf8, fc->source, size);
180180
err = vboxsf_map_folder(folder_name, &sbi->root);
181181
kfree(folder_name);
182182
if (err) {

0 commit comments

Comments
 (0)