scsi: lpfc: Fix gcc -Wstringop-overread warning
authorArnd Bergmann <arnd@arndb.de>
Mon, 22 Mar 2021 16:02:47 +0000 (17:02 +0100)
committerMartin K. Petersen <martin.petersen@oracle.com>
Fri, 2 Apr 2021 02:58:34 +0000 (22:58 -0400)
gcc-11 warns about an strnlen with a length larger than the size of the
passed buffer:

drivers/scsi/lpfc/lpfc_attr.c: In function 'lpfc_nvme_info_show':
drivers/scsi/lpfc/lpfc_attr.c:518:25: error: 'strnlen' specified bound 4095 exceeds source size 24 [-Werror=stringop-overread]
  518 |                         strnlen(LPFC_NVME_INFO_MORE_STR, PAGE_SIZE - 1)
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In this case, the code is entirely valid, as the string is properly
terminated, and the size argument is only there out of extra caution in
case it exceeds a page.

This cannot really happen here, so just simplify it to a sizeof().

Link: https://lore.kernel.org/r/20210322160253.4032422-10-arnd@kernel.org
Fixes: afff0d2321ea ("scsi: lpfc: Add Buffer overflow check, when nvme_info larger than PAGE_SIZE")
Signed-off-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/lpfc/lpfc_attr.c

index 8b4c42016865f12ff04d718a7f45695e9092e5dd..59ca32d850e3171988c8246e6bb02b511a81f768 100644 (file)
@@ -512,11 +512,9 @@ lpfc_nvme_info_show(struct device *dev, struct device_attribute *attr,
                                "6314 Catching potential buffer "
                                "overflow > PAGE_SIZE = %lu bytes\n",
                                PAGE_SIZE);
-               strlcpy(buf + PAGE_SIZE - 1 -
-                       strnlen(LPFC_NVME_INFO_MORE_STR, PAGE_SIZE - 1),
+               strlcpy(buf + PAGE_SIZE - 1 - sizeof(LPFC_NVME_INFO_MORE_STR),
                        LPFC_NVME_INFO_MORE_STR,
-                       strnlen(LPFC_NVME_INFO_MORE_STR, PAGE_SIZE - 1)
-                       + 1);
+                       sizeof(LPFC_NVME_INFO_MORE_STR) + 1);
        }
 
        return len;