Module Name:    src
Committed By:   riastradh
Date:           Mon Jun 27 03:56:37 UTC 2022

Modified Files:
        src/sys/kern: kern_ktrace.c

Log Message:
ktrace(9): Make sure ktrkuser initializes the full ktr_id member.

strlcpy does not; strncpy does.  However, the member must be
NUL-terminated, because kdump uses it, e.g., with printf("%s"), so
expicitly set the last byte to NUL.

Possible fix for a host of sanitizer complaints in syzkaller.


To generate a diff of this commit:
cvs rdiff -u -r1.179 -r1.180 src/sys/kern/kern_ktrace.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/kern/kern_ktrace.c
diff -u src/sys/kern/kern_ktrace.c:1.179 src/sys/kern/kern_ktrace.c:1.180
--- src/sys/kern/kern_ktrace.c:1.179	Sat Mar 12 17:45:53 2022
+++ src/sys/kern/kern_ktrace.c	Mon Jun 27 03:56:37 2022
@@ -1,4 +1,4 @@
-/*	$NetBSD: kern_ktrace.c,v 1.179 2022/03/12 17:45:53 riastradh Exp $	*/
+/*	$NetBSD: kern_ktrace.c,v 1.180 2022/06/27 03:56:37 riastradh Exp $	*/
 
 /*-
  * Copyright (c) 2006, 2007, 2008, 2020 The NetBSD Foundation, Inc.
@@ -61,7 +61,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: kern_ktrace.c,v 1.179 2022/03/12 17:45:53 riastradh Exp $");
+__KERNEL_RCSID(0, "$NetBSD: kern_ktrace.c,v 1.180 2022/06/27 03:56:37 riastradh Exp $");
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -950,7 +950,8 @@ ktr_kuser(const char *id, const void *ad
 	if (error != 0)
 		return;
 
-	strlcpy(ktp->ktr_id, id, KTR_USER_MAXIDLEN);
+	strncpy(ktp->ktr_id, id, KTR_USER_MAXIDLEN - 1);
+	ktp->ktr_id[KTR_USER_MAXIDLEN - 1] = '\0';
 
 	memcpy(ktp + 1, addr, len);
 

Reply via email to