From: Masami Hiramatsu (Google) <[email protected]>

trace_fprobe_match_command_head() copies trace_fprobe_symbol(tf) into a
local buffer 'buf' of size MAX_COMMON_HEAD_LEN + 1 using snprintf before
comparing with argv[0].

Since trace_fprobe_symbol(tf) already returns a null-terminated string,
comparing it directly with argv[0] via strcmp() avoids stack buffer usage
and potential symbol truncation at MAX_COMMON_HEAD_LEN.

Assisted-by: Antigravity:gemini-3.5-flash
Signed-off-by: Masami Hiramatsu (Google) <[email protected]>
---
 kernel/trace/trace_fprobe.c |    5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/kernel/trace/trace_fprobe.c b/kernel/trace/trace_fprobe.c
index 5638a90e61cc..566b64853c61 100644
--- a/kernel/trace/trace_fprobe.c
+++ b/kernel/trace/trace_fprobe.c
@@ -238,13 +238,10 @@ static bool trace_fprobe_is_busy(struct dyn_event *ev)
 static bool trace_fprobe_match_command_head(struct trace_fprobe *tf,
                                            int argc, const char **argv)
 {
-       char buf[MAX_COMMON_HEAD_LEN + 1];
-
        if (!argc)
                return true;
 
-       snprintf(buf, sizeof(buf), "%s", trace_fprobe_symbol(tf));
-       if (strcmp(buf, argv[0]))
+       if (strcmp(trace_fprobe_symbol(tf), argv[0]))
                return false;
        argc--; argv++;
 


Reply via email to