198c06506c
sysfs paths. - Update to version 4.0: * New library libi2c * Many fixes and improvements to decode-dimms * New manual pages and examples added to existing manual pages * New tool i2ctransfer - Removed obsolete decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch, i2c-tools-hackweek-9-dependencies.diff, i2c-tools-hackweek-9-improve-DDR3-support.diff, i2c-tools-r6048-Move-SMBus-helper-functions.patch, i2c-tools-r6053-Add-smbus-header.patch (upstream) OBS-URL: https://build.opensuse.org/package/show/Base:System/i2c-tools?expand=0&rev=44
46 lines
1.6 KiB
Diff
46 lines
1.6 KiB
Diff
From: Jean Delvare <jdelvare@suse.de>
|
|
Subject: i2c-tools: i2cbusses: Avoid buffer overflows in sysfs paths
|
|
Patch-mainline: yes
|
|
Git-commit: def2845efacab3a3973fb0218ac5077a162f8f1e
|
|
|
|
sprintf isn't safe, use snprintf instead.
|
|
---
|
|
tools/i2cbusses.c | 10 +++++-----
|
|
1 file changed, 5 insertions(+), 5 deletions(-)
|
|
|
|
--- a/tools/i2cbusses.c
|
|
+++ b/tools/i2cbusses.c
|
|
@@ -220,18 +220,18 @@ struct i2c_adap *gather_i2c_busses(void)
|
|
|
|
/* this should work for kernels 2.6.5 or higher and */
|
|
/* is preferred because is unambiguous */
|
|
- sprintf(n, "%s/%s/name", sysfs, de->d_name);
|
|
+ snprintf(n, NAME_MAX, "%s/%s/name", sysfs, de->d_name);
|
|
f = fopen(n, "r");
|
|
/* this seems to work for ISA */
|
|
if(f == NULL) {
|
|
- sprintf(n, "%s/%s/device/name", sysfs, de->d_name);
|
|
+ snprintf(n, NAME_MAX, "%s/%s/device/name", sysfs, de->d_name);
|
|
f = fopen(n, "r");
|
|
}
|
|
/* non-ISA is much harder */
|
|
/* and this won't find the correct bus name if a driver
|
|
has more than one bus */
|
|
if(f == NULL) {
|
|
- sprintf(n, "%s/%s/device", sysfs, de->d_name);
|
|
+ snprintf(n, NAME_MAX, "%s/%s/device", sysfs, de->d_name);
|
|
if(!(ddir = opendir(n)))
|
|
continue;
|
|
while ((dde = readdir(ddir)) != NULL) {
|
|
@@ -240,8 +240,8 @@ struct i2c_adap *gather_i2c_busses(void)
|
|
if (!strcmp(dde->d_name, ".."))
|
|
continue;
|
|
if ((!strncmp(dde->d_name, "i2c-", 4))) {
|
|
- sprintf(n, "%s/%s/device/%s/name",
|
|
- sysfs, de->d_name, dde->d_name);
|
|
+ snprintf(n, NAME_MAX, "%s/%s/device/%s/name",
|
|
+ sysfs, de->d_name, dde->d_name);
|
|
if((f = fopen(n, "r")))
|
|
goto found;
|
|
}
|