search

KSPP / linux

Linux kernel source tree (Kernel Self Protection Project)
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
Other
80 stars 5 forks source link

Audit and transform one-element arrays in fs/cifs/cifspdu.h into flex-array members #246

Closed GustavoARSilva closed 6 months ago

GustavoARSilva commented 1 year ago 
fs/cifs/cifspdu.h:565:          unsigned char SecurityBlob[1];  /* followed by */
fs/cifs/cifspdu.h:585:          unsigned char CaseInsensitivePassword[1];     /* followed by: */
fs/cifs/cifspdu.h:602:          unsigned char SecurityBlob[1];  /* followed by */
fs/cifs/cifspdu.h:621:          unsigned char AccountPassword[1];       /* followed by */
fs/cifs/cifspdu.h:635:          unsigned char NativeOS[1];      /* followed by */
fs/cifs/cifspdu.h:696:  unsigned char Password[1];      /* followed by */
fs/cifs/cifspdu.h:708:  unsigned char Service[1];       /* always ASCII, not Unicode */
fs/cifs/cifspdu.h:721:  unsigned char Service[1];       /* always ASCII, not Unicode */
fs/cifs/cifspdu.h:758:  char    Data[1];
fs/cifs/cifspdu.h:765:  char    Data[1];
fs/cifs/cifspdu.h:865:  char fileName[1];
fs/cifs/cifspdu.h:940:  char   fileName[1];
fs/cifs/cifspdu.h:1088: LOCKING_ANDX_RANGE Locks[1];
fs/cifs/cifspdu.h:1117: unsigned char OldFileName[1];
fs/cifs/cifspdu.h:1137: unsigned char OldFileName[1];
fs/cifs/cifspdu.h:1147: unsigned char ErrorFileName[1]; /* only present if error in copy */
fs/cifs/cifspdu.h:1161: unsigned char OldFileName[1];
fs/cifs/cifspdu.h:1176: unsigned char fileName[1];
fs/cifs/cifspdu.h:1188: unsigned char DirName[1];
fs/cifs/cifspdu.h:1200: unsigned char DirName[1];
fs/cifs/cifspdu.h:1212: unsigned char FileName[1];
fs/cifs/cifspdu.h:1232: unsigned char fileName[1];
fs/cifs/cifspdu.h:1314: __u8 Data[1];
fs/cifs/cifspdu.h:1433:/*       __u8 Data[1];*/
fs/cifs/cifspdu.h:1522: char    sid[1];  /* variable size? */
fs/cifs/cifspdu.h:1674: char FileName[1];
fs/cifs/cifspdu.h:1707: char FileName[1];
fs/cifs/cifspdu.h:1814: char FileName[1];
fs/cifs/cifspdu.h:2025: char RequestFileName[1];
fs/cifs/cifspdu.h:2054: REFERRAL3 referrals[1]; /* array of level 3 dfs_referral structures */
fs/cifs/cifspdu.h:2291: char FileName[1];
fs/cifs/cifspdu.h:2329: char LinkDest[1];
fs/cifs/cifspdu.h:2379: __u8   alt_name[1];
fs/cifs/cifspdu.h:2489: char FileName[1];
fs/cifs/cifspdu.h:2503: char FileName[1];
fs/cifs/cifspdu.h:2518: char FileName[1];
fs/cifs/cifspdu.h:2535: char FileName[1];
fs/cifs/cifspdu.h:2553: char FileName[1];
fs/cifs/cifspdu.h:2568: char FileName[1];
fs/cifs/cifspdu.h:2580: char name[1];
fs/cifs/cifspdu.h:2585: struct gea list[1];
fs/cifs/cifspdu.h:2592: char name[1];
fs/cifs/cifspdu.h:2600: struct fea list[1];
kees commented 6 months ago

The last set of fake flex arrays were fixed in commit 35235e19b393b54db0e0d7c424d658ba45f20468