Messages in this thread | | | Date | Thu, 27 Nov 2003 22:19:28 +0000 | From | Russell King <> | Subject | Re: [PATCH 2.6]: IPv6: strcpy -> strlcpy |
| |
On Thu, Nov 27, 2003 at 11:06:10PM +0100, Felipe Alfaro Solana wrote: > On Thu, 2003-11-27 at 21:00, Russell King wrote: > > > > > > I believe that it, to change from strcpy() to strlcpy(), just > > > eliminates possibility of buffer-overrun. > > > > While this is 100% correct, the bit which raised my attention was the > > original message which didn't seem to show that the above had been > > considered. > > Well, I can't see the difference between using strcpy() and strlcpy().
You misunderstand me. Consider the difference between:
strcpy(d, s) strlcpy(d, s, sizeof(d)); strncpy(d, s, sizeof(d));
strncpy zeros the remainder of d if strlen(s) < sizeof(d), but does not zero terminate the buffer if strlen(s) == sizeof(d). (Note: this is how strncpy under the Linux kernel is supposed to work, and yes, the generic strncpy version in lib/string.c is still buggy.)
strlcpy copies up to the smaller of strlen(s)-1 and sizeof(d)-1, and ensures that the string is null terminated. If strlen(s) < sizeof(d)-1, bytes in d will not be written.
Note my final sentence there. Consider the following:
char foo[256];
strlcpy(foo, "hello", sizeof(foo);
copy_to_user(uptr, foo, sizeof(foo));
That ends up writing uninitialised kernel data to (unprivileged) user space. So would strcpy() used in that situation.
strncpy() on the other hand, will zero the rest of the buffer (on x86 at least) but you'll have to manually ensure that there is a terminator on the end. Or, you use strlcpy but memset the entire space you're copying the string into beforehand, which could be wasteful.
Note: we should really fix the generic strncpy() - there are places in the kernel source which rely on the x86 strncpy() behaviour today (eg, binfmt_*.c core file generation.)
-- Russell King Linux kernel 2.6 ARM Linux - http://www.arm.linux.org.uk/ maintainer of: 2.6 PCMCIA - http://pcmcia.arm.linux.org.uk/ 2.6 Serial core - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |