Thread (21 messages) 21 messages, 5 authors, 2026-01-16

Re: [PATCH v2 1/6] uaccess: Add copy_from_user_nul helper

From: Borislav Petkov <bp@alien8.de>
Date: 2026-01-12 13:23:12
Also in: lkml

On Mon, Jan 12, 2026 at 08:22:36PM +0800, Fushuai Wang wrote:
quoted
strncpy_from_user() succeeds even if userspace data does not contain a
nul. Then it reads length bytes.
Yes, but if there is no NUL byte in the user buf, whether you use
strncpy_from_user() or copy_from_user(), you need to manually add
a '\0' in the kernel buf to ensure it is properly NUL-terminated.
This looks like a bunch of churn to save a "= \0" line.

The more important question, IMO, would be whether there are cases in the
kernel which *miss* a NUL termination, audit them and fix them.

That'll give you a better idea whether such a *_nul() helper is even needed.

Because converting only a handful of obvious places in the face of thousands
of copy_from_user() invocations in the kernel is not doing anything useful.

Thx.

-- 
Regards/Gruss,
    Boris.

https://people.kernel.org/tglx/notes-about-netiquette
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help