> But this function doesn't use snprintf(), it uses scnprintf() which > returns the number of characters written into buf and, because > scnprintf() largely follows vnsprintf(), it will never write more than > 'size' bytes into the buffer. if (bank && device) n = snprintf(msg, len, "DIMM location: %s %s ", bank, device); That looks like "snprintf", not "scnprintf" to me :-) What about using: msg[len] = '\0'; to guarantee NUL termination? -Tony -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html