On Mon 14-09-20 12:02:33, Muchun Song wrote: > On Sun, Sep 13, 2020 at 8:42 AM Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> wrote: > > > > On Sat, 12 Sep 2020 23:51:00 +0800 Muchun Song <songmuchun@xxxxxxxxxxxxx> wrote: > > > > > The memory_stat_format() returns a format string, but the return buf > > > may not including the trailing '\0'. So the users may read the buf > > > out of bounds. > > > > That sounds serious. Is a cc:stable appropriate? > > > > Yeah, I think we should cc:stable. Is this a real problem? The buffer should contain 36 lines which makes it more than 100B per line. I strongly suspect we are not able to use that storage up. -- Michal Hocko SUSE Labs