>>>>> "Insu" == Insu Yun <wuninsu@xxxxxxxxx> writes: Insu> Return value of snprintf is not bound by size value, 2nd argument. Insu> (https://www.kernel.org/doc/htmldocs/kernel-api/API-snprintf.html). Insu> Return value is number of printed chars, can be larger than 2nd Insu> argument. Therefore, it can write null byte out of bounds Insu> ofbuffer. Since snprintf puts null, it does not need to put Insu> additional null byte. Applied to 4.5/scsi-queue. -- Martin K. Petersen Oracle Linux Engineering -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
