linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-09-10 15:49:01 -04:00

Files

Naveen Kumar Chaudhary 93c29ebd16 module: use strscpy() to copy module names in stats and dup tracking

Both try_add_failed_module() and kmod_dup_request_exists_wait() use
memcpy() with strlen() to copy module names into fixed-size
char[MODULE_NAME_LEN] buffers. Neither performs a bounds check on the
copy. Current callers always pass names originating from
mod->name (itself char[MODULE_NAME_LEN]), so this is not exploitable
today. However both functions accept a plain const char * with no
documented length contract, making them latent buffer overflows if a
future caller passes a longer string.

Replace memcpy() with strscpy() in both sites, which bounds the copy
to MODULE_NAME_LEN and always NUL-terminates.

Signed-off-by: Naveen Kumar Chaudhary <naveen.osdev@gmail.com>
Reviewed-by: Petr Pavlu <petr.pavlu@suse.com>
Signed-off-by: Petr Pavlu <petr.pavlu@suse.com>

2026-08-06 13:29:02 +02:00

debug_kmemleak.c

module: prepare to handle ROX allocations for text

2024-11-07 14:25:15 -08:00

decompress.c

module: decompress: check return value of module_extend_max_pages()

2026-06-04 16:37:32 +00:00

dups.c

module: use strscpy() to copy module names in stats and dup tracking

2026-08-06 13:29:02 +02:00

internal.h

module: deprecate usage of *_gpl sections in module loader