From: David Gibson <david@gibson.dropbear.id.au>
To: Stefano Brivio <sbrivio@redhat.com>
Cc: passt-dev@passt.top, Matej Hrica <mhrica@redhat.com>
Subject: Re: [PATCH 1/4] conf: Copy up to MAXDNSRCH - 1 bytes, not MAXDNSRCH
Date: Thu, 27 Jun 2024 20:11:14 +1000 [thread overview]
Message-ID: <Zn06wqDcImDRzn1b@zatzit> (raw)
In-Reply-To: <20240627092653.372a58ea@elisabeth>
[-- Attachment #1: Type: text/plain, Size: 2082 bytes --]
On Thu, Jun 27, 2024 at 09:27:01AM +0200, Stefano Brivio wrote:
> On Thu, 27 Jun 2024 10:45:28 +1000
> David Gibson <david@gibson.dropbear.id.au> wrote:
>
> > On Thu, Jun 27, 2024 at 01:45:33AM +0200, Stefano Brivio wrote:
> > > Spotted by Coverity just recently. Not that it really matters as
> > > MAXDNSRCH always appears to be defined as 1025, while a full domain
> > > name can have up to 253 characters: it would be a bit pointless to
> > > have a longer search domain.
> > >
> > > Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
> >
> > Hm. So, IIRC strncpy() won't \0 terminate in the case where it
> > truncates. I guess we'll get away with that here since we expect
> > c->dns_search to be filled with \0 before hand. That's... more
> > fragile than ideal, though.
>
> Well, we know we start from a zero-initialised area, that's by design,
> it's not that we get away with it. Without that consideration not many
> things would work in this function.
That's a fair point.
Reviewed-by: David Gibson <david@gibson.dropbear.id.au>
> Are you suggesting to use snprintf()? It looks a bit pedantic to me but
> I'm fine with it. Otherwise, feel free to post a patch fixing it in a
> way you feel it's ideal...
>
> > > ---
> > > conf.c | 2 +-
> > > 1 file changed, 1 insertion(+), 1 deletion(-)
> > >
> > > diff --git a/conf.c b/conf.c
> > > index e1f5422..9e47e9a 100644
> > > --- a/conf.c
> > > +++ b/conf.c
> > > @@ -453,7 +453,7 @@ static void get_dns(struct ctx *c)
> > > while (s - c->dns_search < ARRAY_SIZE(c->dns_search) - 1
> > > /* cppcheck-suppress strtokCalled */
> > > && (p = strtok(NULL, " \t"))) {
> > > - strncpy(s->n, p, sizeof(c->dns_search[0]));
> > > + strncpy(s->n, p, sizeof(c->dns_search[0]) - 1);
> > > s++;
> > > *s->n = 0;
> > > }
> >
>
--
David Gibson (he or they) | I'll have my music baroque, and my code
david AT gibson.dropbear.id.au | minimalist, thank you, not the other way
| around.
http://www.ozlabs.org/~dgibson
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
next prev parent reply other threads:[~2024-06-27 10:11 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-06-26 23:45 [PATCH 0/4] Small, assorted "hardening" fixes Stefano Brivio
2024-06-26 23:45 ` [PATCH 1/4] conf: Copy up to MAXDNSRCH - 1 bytes, not MAXDNSRCH Stefano Brivio
2024-06-27 0:45 ` David Gibson
2024-06-27 7:27 ` Stefano Brivio
2024-06-27 10:11 ` David Gibson [this message]
2024-06-26 23:45 ` [PATCH 2/4] tcp_splice: Check return value of setsockopt() for SO_RCVLOWAT Stefano Brivio
2024-06-27 0:46 ` David Gibson
2024-06-26 23:45 ` [PATCH 3/4] util, lineread, tap: Overflow checks on long signed sums and subtractions Stefano Brivio
2024-06-27 1:13 ` David Gibson
2024-06-27 7:55 ` Stefano Brivio
2024-06-27 20:46 ` Stefano Brivio
2024-06-28 7:15 ` David Gibson
2024-06-28 7:11 ` David Gibson
2024-06-28 7:55 ` Stefano Brivio
2024-06-28 18:30 ` Stefano Brivio
2024-07-08 13:01 ` Stefano Brivio
2024-06-26 23:45 ` [PATCH 4/4] tap: Drop frames from guest whose length is more than remaining buffer Stefano Brivio
2024-06-27 1:30 ` David Gibson
2024-06-27 8:21 ` Stefano Brivio
2024-06-28 7:19 ` David Gibson
2024-06-28 7:56 ` Stefano Brivio
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Zn06wqDcImDRzn1b@zatzit \
--to=david@gibson.dropbear.id.au \
--cc=mhrica@redhat.com \
--cc=passt-dev@passt.top \
--cc=sbrivio@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://passt.top/passt
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for IMAP folder(s).