lkml.org 
[lkml]   [2011]   [Mar]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] Make /proc/slabinfo 0400
    On Fri, Mar 04, 2011 at 05:02:36PM -0600, Matt Mackall wrote:
    > copies too many bytes from userspace. Every piece of code writes its own
    > bound checks on copy_from_user, for instance, and gets it wrong by
    > hitting signed/unsigned issues, alignment issues, etc. that are on the
    > very edge of the average C coder's awareness.

    Agreed. Maybe something that would help is to have helper routines
    which handle the most common patterns that driver writers need. Some
    of the most common that I've seen from doing a quick survey are:

    1) kmalloc() followed by copy_from_user()
    2) kmem_cache_alloc() followed by copy_from_user()
    3) copy_from_user() to a buffer allocated on the stack, where the length
    is passed in from userspace, and the maximum expected input size is
    declared by the driver. (Used by debugfs, proc, and sysfs handlers)
    4) copy_from_user() to a structure allocated on the stack

    If we had wrappers for the most common cases, then any cases that were
    left that used copy_from_user() explicitly could be flagged and
    checked by hand, since they would be exception, and not the rule.

    - Ted


    \
     
     \ /
      Last update: 2011-03-06 11:19    [W:4.025 / U:0.156 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site