diff options
| author | Seyediman Seyedarab <imandevel@gmail.com> | 2025-07-24 15:59:13 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-11-13 15:36:58 -0500 |
| commit | 75e8987dce9183a9ca5bdb04fdd48792e9e4b08f (patch) | |
| tree | 68b5bca659c6dc65ac18ff2be3ccac0e6a9023c3 /include/sound | |
| parent | 0a7fec33cbbef59f4abe6ed88ea747bd40782461 (diff) | |
| download | linux-75e8987dce9183a9ca5bdb04fdd48792e9e4b08f.tar.gz linux-75e8987dce9183a9ca5bdb04fdd48792e9e4b08f.tar.bz2 linux-75e8987dce9183a9ca5bdb04fdd48792e9e4b08f.zip | |
drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
[ Upstream commit 6510b62fe9303aaf48ff136ff69186bcfc32172d ]
snprintf() returns the number of characters that *would* have been
written, which can overestimate how much you actually wrote to the
buffer in case of truncation. That leads to 'data += this' advancing
the pointer past the end of the buffer and size going negative.
Switching to scnprintf() prevents potential buffer overflows and ensures
consistent behavior when building the output string.
Signed-off-by: Seyediman Seyedarab <ImanDevel@gmail.com>
Link: https://lore.kernel.org/r/20250724195913.60742-1-ImanDevel@gmail.com
Signed-off-by: Danilo Krummrich <dakr@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'include/sound')
0 files changed, 0 insertions, 0 deletions