Justin Stitt 91bcea421e fbdev: uvesafb: replace deprecated strncpy with strscpy_pad ... strncpy() is deprecated for use on NUL-terminated destination strings [1] and as such we should prefer more robust and less ambiguous string interfaces. We expect v86d_path to be NUL-terminated based on its use with the C-string format specifier in printf-likes: | pr_err("failed to execute %s\n", v86d_path); and | return snprintf(buf, PAGE_SIZE, "%s\n", v86d_path); Let's also opt to pad v86d_path since it may get used in and around userspace: | return call_usermodehelper(v86d_path, argv, envp, UMH_WAIT_PROC); Considering the above, strscpy_pad() is the best replacement as it guarantees both NUL-termination and NUL-padding on the destination buffer. Note that this patch relies on the _new_ 2-argument versions of strscpy() and strscpy_pad() introduced in Commit e6584c3964 ("string: Allow 2-argument strscpy()"). Link: https://www.kernel.org/doc/html/latest/process/deprecated.html#strncpy-on-nul-terminated-strings [1] Link: https://manpages.debian.org/testing/linux-manual-4.8/strscpy.9.en.html Link: https://github.com/KSPP/linux/issues/90 Cc: linux-hardening@vger.kernel.org Signed-off-by: Justin Stitt <justinstitt@google.com> Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: Helge Deller <deller@gmx.de>		2024-04-25 11:57:45 +02:00
..
backlight
console
fbdev	fbdev: uvesafb: replace deprecated strncpy with strscpy_pad	2024-04-25 11:57:45 +02:00
logo	video: logo: Drop full path of the input filename in generated file	2024-04-10 16:11:15 +02:00
aperture.c
cmdline.c
display_timing.c
hdmi.c
Kconfig
Makefile
nomodeset.c
of_display_timing.c
of_videomode.c
screen_info_generic.c
screen_info_pci.c
sticore.c	fbcon: Increase maximum font width x height to 64 x 128	2024-03-16 08:29:48 +01:00
vgastate.c
videomode.c