Re: [PATCH] kbuild: replace unbounded sprintf call in modpost

2013-11-06 Thread Michal Marek
On Fri, Oct 25, 2013 at 06:14:43AM -0700, Kees Cook wrote: > The modpost tool could overflow its stack buffer if someone was running > with an insane shell environment. Regardless, it's technically a bug, > so this fixes it to truncate the string instead of seg-faulting. > > Found by Coverity. >

[PATCH] kbuild: replace unbounded sprintf call in modpost

2013-10-25 Thread Kees Cook
The modpost tool could overflow its stack buffer if someone was running with an insane shell environment. Regardless, it's technically a bug, so this fixes it to truncate the string instead of seg-faulting. Found by Coverity. Signed-off-by: Kees Cook --- scripts/mod/sumversion.c |2 +- 1 fi