diff options
| author | Gustavo A. R. Silva <gustavoars@kernel.org> | 2023-10-09 22:44:54 +0200 |
|---|---|---|
| committer | David Sterba <dsterba@suse.com> | 2023-10-11 11:37:19 +0200 |
| commit | 75f5f60bf7ee075ed4a29637ce390898b4c36811 (patch) | |
| tree | 5dc8aafc51194160280f71ac9e62ab6ba6e20959 /fs/btrfs/delayed-inode.c | |
| parent | Revert "btrfs: reject unknown mount options early" (diff) | |
| download | linux-75f5f60bf7ee075ed4a29637ce390898b4c36811.tar.xz linux-75f5f60bf7ee075ed4a29637ce390898b4c36811.zip | |
btrfs: add __counted_by for struct btrfs_delayed_item and use struct_size()
Prepare for the coming implementation by GCC and Clang of the __counted_by
attribute. Flexible array members annotated with __counted_by can have
their accesses bounds-checked at run-time via CONFIG_UBSAN_BOUNDS (for
array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family
functions).
While there, use struct_size() helper, instead of the open-coded
version, to calculate the size for the allocation of the whole
flexible structure, including of course, the flexible-array member.
This code was found with the help of Coccinelle, and audited and
fixed manually.
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Diffstat (limited to 'fs/btrfs/delayed-inode.c')
| -rw-r--r-- | fs/btrfs/delayed-inode.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/btrfs/delayed-inode.c b/fs/btrfs/delayed-inode.c index dfe29b29915f..7c2ee0795dc7 100644 --- a/fs/btrfs/delayed-inode.c +++ b/fs/btrfs/delayed-inode.c @@ -313,7 +313,7 @@ static struct btrfs_delayed_item *btrfs_alloc_delayed_item(u16 data_len, { struct btrfs_delayed_item *item; - item = kmalloc(sizeof(*item) + data_len, GFP_NOFS); + item = kmalloc(struct_size(item, data, data_len), GFP_NOFS); if (item) { item->data_len = data_len; item->type = type; |