diff options
| author | Kees Cook <[email protected]> | 2023-08-17 20:45:24 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2023-08-22 13:48:05 +0000 |
| commit | aee17df05ea3771cb74662430dc98e69b72ab9f3 (patch) | |
| tree | bcbec9f079aed1a9536a668f40f725cbdbb851ea | |
| parent | staging: greybus: fix alignment of open parenthesis (diff) | |
| download | kernel-aee17df05ea3771cb74662430dc98e69b72ab9f3.tar.gz kernel-aee17df05ea3771cb74662430dc98e69b72ab9f3.zip | |
staging: rtl8192e: Annotate struct rtllib_txb with __counted_by
Prepare for the coming implementation by GCC and Clang of the __counted_by
attribute. Flexible array members annotated with __counted_by can have
their accesses bounds-checked at run-time checking via CONFIG_UBSAN_BOUNDS
(for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family
functions).
As found with Coccinelle[1], add __counted_by for struct rtllib_txb.
[1] https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci
Cc: Greg Kroah-Hartman <[email protected]>
Cc: Philipp Hortmann <[email protected]>
Cc: [email protected]
Signed-off-by: Kees Cook <[email protected]>
Reviewed-by: "Gustavo A. R. Silva" <[email protected]>
Tested-by: Philipp Hortmann <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
| -rw-r--r-- | drivers/staging/rtl8192e/rtllib.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/staging/rtl8192e/rtllib.h b/drivers/staging/rtl8192e/rtllib.h index afde4812a221..bfa4dbf94d60 100644 --- a/drivers/staging/rtl8192e/rtllib.h +++ b/drivers/staging/rtl8192e/rtllib.h @@ -814,7 +814,7 @@ struct rtllib_txb { u16 reserved; __le16 frag_size; __le16 payload_size; - struct sk_buff *fragments[]; + struct sk_buff *fragments[] __counted_by(nr_frags); }; #define MAX_SUBFRAME_COUNT 64 |