Messages in this thread | | | Subject | Re: [PATCH] net/ncsi: Silence runtime memcpy() false positive warning | From | Paolo Abeni <> | Date | Tue, 06 Dec 2022 11:36:54 +0100 |
| |
Hello,
On Fri, 2022-12-02 at 13:24 -0800, Kees Cook wrote: > The memcpy() in ncsi_cmd_handler_oem deserializes nca->data into a > flexible array structure that overlapping with non-flex-array members > (mfr_id) intentionally. Since the mem_to_flex() API is not finished, > temporarily silence this warning, since it is a false positive, using > unsafe_memcpy(). > > Reported-by: Joel Stanley <joel@jms.id.au> > Link: https://lore.kernel.org/netdev/CACPK8Xdfi=OJKP0x0D1w87fQeFZ4A2DP2qzGCRcuVbpU-9=4sQ@mail.gmail.com/ > Cc: Samuel Mendoza-Jonas <sam@mendozajonas.com> > Cc: "David S. Miller" <davem@davemloft.net> > Cc: Eric Dumazet <edumazet@google.com> > Cc: Jakub Kicinski <kuba@kernel.org> > Cc: Paolo Abeni <pabeni@redhat.com> > Cc: netdev@vger.kernel.org > Signed-off-by: Kees Cook <keescook@chromium.org>
Is this for the -net or the -net-next tree? It applies to both...
It you are targetting the -net tree, I think it would be nicer adding a suitable Fixes tag.
Thanks!
Paolo
| |