Skip to content

Commit 97f576e

Browse files
keespcmoore
authored andcommitted
audit: Annotate struct audit_chunk with __counted_by
Prepare for the coming implementation by GCC and Clang of the __counted_by attribute. Flexible array members annotated with __counted_by can have their accesses bounds-checked at run-time checking via CONFIG_UBSAN_BOUNDS (for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family functions). As found with Coccinelle[1], add __counted_by for struct audit_chunk. [1] https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci Cc: Paul Moore <paul@paul-moore.com> Cc: Eric Paris <eparis@redhat.com> Cc: audit@vger.kernel.org Signed-off-by: Kees Cook <keescook@chromium.org> Reviewed-by: "Gustavo A. R. Silva" <gustavoars@kernel.org> Signed-off-by: Paul Moore <paul@paul-moore.com>
1 parent 0bb80ec commit 97f576e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

kernel/audit_tree.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ struct audit_chunk {
3434
struct list_head list;
3535
struct audit_tree *owner;
3636
unsigned index; /* index; upper bit indicates 'will prune' */
37-
} owners[];
37+
} owners[] __counted_by(count);
3838
};
3939

4040
struct audit_tree_mark {

0 commit comments

Comments
 (0)