mirror of
https://github.com/torvalds/linux.git
synced 2026-11-07 06:17:02 +01:00
selftests/landlock: Fix snprintf truncation checks in audit helpers
snprintf() returns the number of characters that would have been
written, excluding the terminating NUL byte. When the output is
truncated, this return value equals or exceeds the buffer size. Fix
matches_log_domain_allocated() and matches_log_domain_deallocated() to
detect truncation with ">=" instead of ">".
Cc: Günther Noack <gnoack@google.com>
Cc: stable@vger.kernel.org
Fixes: 6a500b2297 ("selftests/landlock: Add tests for audit flags and domain IDs")
Reviewed-by: Günther Noack <gnoack3000@gmail.com>
Link: https://lore.kernel.org/r/20260402192608.1458252-2-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
This commit is contained in:
parent
e75e38055b
commit
b566f7a4f0
|
|
@ -309,7 +309,7 @@ static int __maybe_unused matches_log_domain_allocated(int audit_fd, pid_t pid,
|
|||
|
||||
log_match_len =
|
||||
snprintf(log_match, sizeof(log_match), log_template, pid);
|
||||
if (log_match_len > sizeof(log_match))
|
||||
if (log_match_len >= sizeof(log_match))
|
||||
return -E2BIG;
|
||||
|
||||
return audit_match_record(audit_fd, AUDIT_LANDLOCK_DOMAIN, log_match,
|
||||
|
|
@ -326,7 +326,7 @@ static int __maybe_unused matches_log_domain_deallocated(
|
|||
|
||||
log_match_len = snprintf(log_match, sizeof(log_match), log_template,
|
||||
num_denials);
|
||||
if (log_match_len > sizeof(log_match))
|
||||
if (log_match_len >= sizeof(log_match))
|
||||
return -E2BIG;
|
||||
|
||||
return audit_match_record(audit_fd, AUDIT_LANDLOCK_DOMAIN, log_match,
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user