From nobody Sun Jun 14 06:09:02 2026 Received: from mail-yw1-f171.google.com (mail-yw1-f171.google.com [209.85.128.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 094F3296BA9 for ; Sat, 2 May 2026 22:10:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.171 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777759837; cv=none; b=SYrPsdtm32a1/hSIbE2yakYUnLVj7JCNY02zL+AKISxKSIuYO0SOvl8jSsshj9CjbLI17OGlp6nzyYzneJrjA/vHhGiprXhFmwUqCqqzeIFtPyKTOXwHg1u574LpD1BqPEEcvB67SuNRCiGCVlcfgZDdPmuOTcjIRguaNckuoqA= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777759837; c=relaxed/simple; bh=wEmaTSfAAmqLY0e5lzZCFR1s2aWwPm5zfhxxiUCw4tY=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=tDOYTGy58ymAeJrRlTzkN4B7YZ81+Ljle0xUg8PjsbKXG8CNc2lj4fxb1B7IHulDU/csLT4C37ah7pq8N6Hy2lPaerSIF2uSZXWW5hFA/Sv7iCXgvxVwFcFe231ezeO1iPG0+uOaS/K3gtENYzKkzlhFnbHxC9rqWE0RxXcAQ5c= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Anz0EdAX; arc=none smtp.client-ip=209.85.128.171 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Anz0EdAX" Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-7b4ee3a88e1so43524017b3.1 for ; Sat, 02 May 2026 15:10:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1777759835; x=1778364635; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=BtyC2HwxjEku3oE5Tx+mZC+Fd1YZppncyqkwce1J8qU=; b=Anz0EdAXD6GIVph6vRk6Ty40ftQFDkTdw6NF4Mq8seuLLaFrr6tDkmusJolJ9buIwO jlnL6LiKeHlNaVST9MeE1hafABbfR7P+YW9GjrbmHmXazJ0Y86IDiRoMs4pVAVpiQ+XK dN65z5nFQ1BldfduHT9autc4WMIoptpBtYFXQP1zow9Ozi2RcnMVUp1jweeAXHMJvEVG SKdfPmpDiXWkyn/j5DnCkIujwcK3Bwc3OsY1cTn8io9ks7rdR8DjUtId43giw2AtKqP+ AYxzJwafHg1OfweAPduwHnfl2Nk9UCOC6yyHrKJiFoVOa5adJwaXAfc127EbwkilEp5o r4nQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777759835; x=1778364635; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=BtyC2HwxjEku3oE5Tx+mZC+Fd1YZppncyqkwce1J8qU=; b=RaFjo59TXfp9bIrXKzpyfZ/C0w1Rbt3ngVpnOI0D1x19K6bUzsXKKPw7YbC5GkCScJ NmiqauSS7qkoDOuA3SGx7N5C7OicdIbGsqvu3swaKe+DvnX+T27CBJ7K74lziUbG6OED HbLJ8KnHjom8O6mFMYXUm9YB5XQRmpSSebXekQzXe43Kpiiw4jcvaaOjLepWM1b0/tZN DGNTWd+Ew6w//7Y/hTvjHkm8l52t+Qn+Uqx5SHlsvIACIOZ3RQwfysa9bzWN/e++INER aVI3NARm+RFQ3IneCfricoxpctyNfnCAEZjT56WE3i4M8hbBEjhgzSawiiWVBDwcc4xY KRJg== X-Gm-Message-State: AOJu0YxPqgFQaPqlnHhemljaui1FOm5W/GBFrSk2hJN1W0RdTK2vps6r nnN9pAfa5S3qFHlkgg6+cFEb0jEcAFAk9aR2yp2YredusSSaDpIyAJxF X-Gm-Gg: AeBDieu7W+DHOGKXTINm70BPbE/4/fke70M0pXo+tYz82FYm+Zmthqb21b9S7xD2Kw7 ZjCW8jr8H9+eCzW70MQ8JhMUyJo32ZLddCZRPRprTP7AGazq5YYXY5C+suBUmKjWkhLd/GR6ILj 3rDyxX8YJ85iYYA5GNVQwWPad/JUvGaINMrTXjk19vtvTlfrNVEZMKaLQOYmertesz4bWJL1Kgq JzXTL7EyFgxNCeydO3IqGGER3VCLAZO4WNVD1f0zXsYTDiBs+wcwI/Y2OnNpF5HCs4drAF2Q8in xumvND38Orcifk/UEJVoI0fkRW/Vk+4Nbtg20G6fIqDPgfaJcg7jh4QVM5OfQudKjJvlHLxbC1p HeUKhNlLMX4PIOwgCiyG37cb3N1SL0IL/vWWlCDXcwc93z1GkVACQaTWHKs2EaGDlqcefdrVsHG xi5IfYE162s4U0Ipgeeongq82RLqDCACA7HdTgxJQJISYIl/RtiA2il0jVK+MJT5OcRHSyL/0jr rRjZv4eRfXkEQM2RbMAO3Z8t4zI3BdztJbcz26cdg== X-Received: by 2002:a05:690c:f08:b0:79f:3b8c:a7fc with SMTP id 00721157ae682-7bd77144b29mr47963097b3.39.1777759834912; Sat, 02 May 2026 15:10:34 -0700 (PDT) Received: from tradnomic.. (162-196-88-40.lightspeed.frokca.sbcglobal.net. [162.196.88.40]) by smtp.gmail.com with ESMTPSA id 00721157ae682-7bd6655d954sm28853537b3.18.2026.05.02.15.10.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 02 May 2026 15:10:34 -0700 (PDT) From: rafad900 X-Google-Original-From: rafad900 <19312533+rafad900@users.noreply.github.com> To: rafad900@gmail.com, bp@alien8.de, tglx@kernel.org, skhan@linuxfoundation.org Cc: linux-kernel@vger.kernel.org, x86-cpuid@lists.linux.dev, rafad900 <19312533+rafad900@users.noreply.github.com> Subject: [PATCH] tools/x86/kcpuid: bound CSV field copies to avoid overflow Date: Sat, 2 May 2026 15:10:30 -0700 Message-ID: <20260502221030.1081829-1-19312533+rafad900@users.noreply.github.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" I added bounded copies of the bit descriptions to avoid possible overflows. I tested by compiling the tool and scp into qemu along with the .csv file. Then ran the tool and saw no errors Signed-off-by: rafad900 <19312533+rafad900@users.noreply.github.com> --- tools/arch/x86/kcpuid/kcpuid.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tools/arch/x86/kcpuid/kcpuid.c b/tools/arch/x86/kcpuid/kcpuid.c index 7dc6b9235d02..c17dbcf453eb 100644 --- a/tools/arch/x86/kcpuid/kcpuid.c +++ b/tools/arch/x86/kcpuid/kcpuid.c @@ -415,8 +415,8 @@ static void parse_line(char *line) =20 bdesc->end =3D bit_end; bdesc->start =3D bit_start; - strcpy(bdesc->simp, strtok(tokens[4], " \t")); - strcpy(bdesc->detail, tokens[5]); + strncpy(bdesc->simp, strtok(tokens[4], " \t"), sizeof(bdesc->simp) - 1); + strncpy(bdesc->detail, tokens[5], sizeof(bdesc->detail) - 1); } return; =20 --=20 2.43.0