This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH v7] Implement strlcpy, strlcat [BZ #178]

From: Paul Eggert <eggert at cs dot ucla dot edu>
To: Florian Weimer <fweimer at redhat dot com>, Alexander Cherepanov <ch3root at openwall dot com>
Cc: GNU C Library <libc-alpha at sourceware dot org>
Date: Tue, 5 Jan 2016 09:11:01 -0800
Subject: Re: [PATCH v7] Implement strlcpy, strlcat [BZ #178]
Authentication-results: sourceware.org; auth=none
References: <5682DD7E dot 6000301 at redhat dot com> <56839678 dot 8040304 at cs dot ucla dot edu> <568ADC5F dot 5010608 at redhat dot com> <568B0824 dot 6000101 at openwall dot com> <568BA474 dot 2030104 at redhat dot com>

On 01/05/2016 03:09 AM, Florian Weimer wrote:

For example, I don't expect

   read (fd, ptr, SSIZE_MAX)

to succeed as long as the actual number of bytes read is sufficiently
small (and it fails with EFAULT on Linux).

I agree with your expectation. Any program playing that sort of game isa security problem waiting to happen, and GNU/Linux is doing the rightthing here.

References:
- Re: [PATCH v7] Implement strlcpy, strlcat [BZ #178]
  - From: Florian Weimer
- Re: [PATCH v7] Implement strlcpy, strlcat [BZ #178]
  - From: Alexander Cherepanov
- Re: [PATCH v7] Implement strlcpy, strlcat [BZ #178]
  - From: Florian Weimer

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]