Re: [PATCH 3/3] module: Add compile-time check for embedded NUL characters

2025-10-08 Thread Petr Pavlu
On 10/8/25 5:59 AM, Kees Cook wrote: > Long ago, the kernel module license checks were bypassed by embedding a > NUL character in the MODULE_LICENSE() string[1]. By using a string like > "GPL\0proprietary text", the kernel would only read "GPL" due to C string > termination at the NUL byte, allowin

[PATCH 3/3] module: Add compile-time check for embedded NUL characters

2025-10-07 Thread Kees Cook
Long ago, the kernel module license checks were bypassed by embedding a NUL character in the MODULE_LICENSE() string[1]. By using a string like "GPL\0proprietary text", the kernel would only read "GPL" due to C string termination at the NUL byte, allowing proprietary modules to avoid kernel taintin