]> www.infradead.org Git - users/jedix/linux-maple.git/commitdiff
platform/x86: thinkpad-acpi: replace strcpy with strscpy
authorNitin Joshi <nitjoshi@gmail.com>
Tue, 7 Jan 2025 02:15:07 +0000 (11:15 +0900)
committerIlpo Järvinen <ilpo.jarvinen@linux.intel.com>
Thu, 9 Jan 2025 11:40:15 +0000 (13:40 +0200)
strcpy() performs no bounds checking on the destination buffer. This
could result in linear overflows beyond the end of the buffer, leading
to all kinds of misbehaviors.[1]

[1]: https://www.kernel.org/doc/html/latest/process/deprecated.html#strcpy

Signed-off-by: Nitin Joshi <nitjoshi@gmail.com>
Reviewed-by: Mark Pearson <mpearson-lenovo@squebb.ca>
Link: https://lore.kernel.org/r/20250107021507.4786-1-nitjoshi@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
drivers/platform/x86/thinkpad_acpi.c

index f516628617384179b54b6caeb3d1175c06306d31..22f871e9f53cc512df6b3a2235de86c54996c4e9 100644 (file)
@@ -11681,7 +11681,7 @@ static int __init set_ibm_param(const char *val, const struct kernel_param *kp)
                if (strcmp(ibm->name, kp->name) == 0 && ibm->write) {
                        if (strlen(val) > sizeof(ibms_init[i].param) - 1)
                                return -ENOSPC;
-                       strcpy(ibms_init[i].param, val);
+                       strscpy(ibms_init[i].param, val);
                        return 0;
                }
        }