jerpelea opened a new pull request, #20326:
URL: https://github.com/apache/nuttx/pull/20326

   ## Summary
   
   Fix line buffer overreads when generating /proc/modules and /proc/irqs.
   
   Both callbacks formatted an entry using snprintf() and passed its return 
value to procfs_memcpy(). When the formatted output was larger than the line 
buffer, snprintf() returned the length that would have been written, rather 
than the number of bytes stored in the buffer. As a result, procfs_memcpy() 
could read beyond the end of the formatting buffer.
   
   Use procfs_snprintf(), which returns the number of bytes actually stored, so 
the subsequent copy is limited to valid buffer contents.
   
   ## Impact
   
   RELEASE
   
   ## Testing
   
   CI


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to