Skip to content

Commit

Permalink
selftests/nolibc: prevent out of bounds access in expect_vfprintf
Browse files Browse the repository at this point in the history
If read() fails and returns -1 (or returns garbage for some other
reason) buf would be accessed out of bounds.
Only use the return value of read() after it has been validated.

Signed-off-by: Thomas Weißschuh <linux@weissschuh.net>
Signed-off-by: Willy Tarreau <w@1wt.eu>
  • Loading branch information
t-8ch authored and wtarreau committed Aug 23, 2023
1 parent 37266a9 commit 9c5e490
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion tools/testing/selftests/nolibc/nolibc-test.c
Original file line number Diff line number Diff line change
Expand Up @@ -1051,7 +1051,6 @@ static int expect_vfprintf(int llen, int c, const char *expected, const char *fm
lseek(fd, 0, SEEK_SET);

r = read(fd, buf, sizeof(buf) - 1);
buf[r] = '\0';

fclose(memfile);

Expand All @@ -1061,6 +1060,7 @@ static int expect_vfprintf(int llen, int c, const char *expected, const char *fm
return 1;
}

buf[r] = '\0';
llen += printf(" \"%s\" = \"%s\"", expected, buf);
ret = strncmp(expected, buf, c);

Expand Down

0 comments on commit 9c5e490

Please sign in to comment.