hollalinux
/
linux-sg2042
mirror of https://github.com/sophgo/linux-riscv.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

scripts/kallsyms: fix memory corruption caused by write over-run 

memcpy() writes one more byte than allocated.

Fixes: 8d60526999 ("scripts/kallsyms: change table to store (strcut sym_entry *)")
Reported-by: youling257 <youling257@gmail.com>
Reported-by: Pavel Machek <pavel@ucw.cz>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Tested-by: Pavel Machek <pavel@ucw.cz>
This commit is contained in:
Masahiro Yamada 2020-02-11 01:18:52 +09:00
parent bb6d3fb354
commit 9d1b38958b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
scripts/kallsyms.c
View File

@ -210,7 +210,7 @@ static struct sym_entry *read_symbol(FILE *in)
len = strlen(name) + 1; len = strlen(name) + 1;
sym = malloc(sizeof(*sym) + len); sym = malloc(sizeof(*sym) + len + 1);
if (!sym) { if (!sym) {
fprintf(stderr, "kallsyms failure: " fprintf(stderr, "kallsyms failure: "
"unable to allocate required amount of memory\n"); "unable to allocate required amount of memory\n");
@ -219,7 +219,7 @@ static struct sym_entry *read_symbol(FILE *in)
sym->addr = addr; sym->addr = addr;
sym->len = len; sym->len = len;
sym->sym[0] = type; sym->sym[0] = type;
memcpy(sym_name(sym), name, len); strcpy(sym_name(sym), name);
sym->percpu_absolute = 0; sym->percpu_absolute = 0;
return sym; return sym;