[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-trivial] [PATCH for 2.10 31/35] syscall: replace strcpy() by g
From: |
Philippe Mathieu-Daudé |
Subject: |
Re: [Qemu-trivial] [PATCH for 2.10 31/35] syscall: replace strcpy() by g_strlcpy() |
Date: |
Tue, 29 May 2018 11:19:39 -0300 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 |
Hi Laurent,
On 07/24/2017 04:28 PM, Laurent Vivier wrote:
> Le 24/07/2017 à 20:27, Philippe Mathieu-Daudé a écrit :
>> linux-user/syscall.c:9860:17: warning: Call to function 'strcpy' is insecure
>> as it does not provide bounding of the memory buffer. Replace unbounded copy
>> functions with analogous functions that support length arguments such as
>> 'strlcpy'. CWE-119
>> strcpy (buf->machine, cpu_to_uname_machine(cpu_env));
>> ^~~~~~
>>
>> Reported-by: Clang Static Analyzer
>> Signed-off-by: Philippe Mathieu-Daudé <address@hidden>
>> ---
>> linux-user/syscall.c | 3 ++-
>> 1 file changed, 2 insertions(+), 1 deletion(-)
>>
>> diff --git a/linux-user/syscall.c b/linux-user/syscall.c
>> index 963b9c8f4b..847f729834 100644
>> --- a/linux-user/syscall.c
>> +++ b/linux-user/syscall.c
>> @@ -9853,7 +9853,8 @@ abi_long do_syscall(void *cpu_env, int num, abi_long
>> arg1,
>> if (!is_error(ret)) {
>> /* Overwrite the native machine name with whatever is being
>> emulated. */
>> - strcpy (buf->machine, cpu_to_uname_machine(cpu_env));
>> + g_strlcpy(buf->machine, cpu_to_uname_machine(cpu_env),
>> + sizeof(buf->machine));
>> /* Allow the user to override the reported release. */
>> if (qemu_uname_release && *qemu_uname_release) {
>> g_strlcpy(buf->release, qemu_uname_release,
>>
>
> We should not have a problem here as cpu_to_uname_machine() is "const
> char *" and the string is defined inside QEMU (so it should fit into
> machine[]).
>
> Reviewed-by: Laurent Vivier <address@hidden>
Do you mind queuing this patch in your linux-user tree?
Thanks,
Phil.
- Re: [Qemu-trivial] [PATCH for 2.10 31/35] syscall: replace strcpy() by g_strlcpy(),
Philippe Mathieu-Daudé <=