Re: [PATCH net] can: can327: fix snprintf() limit in can327_handle_prompt()

From: Max Staudt
Date: Mon Nov 18 2024 - 19:49:21 EST


Hi all,

As promised, here is a patch cleaning up can327's payload "encoding" (the hex dump part), plus a comment explaining why Dan's finding turned out not to be security relevant. It's as Vincent already explained, plus additional background information:

https://lore.kernel.org/linux-can/20241119003815.767004-1-max@xxxxxxxxx/T/

I've taken the liberty of not CC'ing the network maintainers on that patch, hence this email with a pointer to it for anyone interested. In the end, while it looked worrying at first, it ended up being just a minor cleanup.


Thanks Dan for pointing out that ugly piece of code. I'd really like to one day find the time to do some further cleanup, and especially further commenting in order to reduce the bus factor, but oh well...


Max