Re: [PATCH 0/6] lib/crypto: More at_least decorations

From: Kees Cook
Date: Mon Nov 24 2025 - 14:20:27 EST


On Sun, Nov 23, 2025 at 12:54:31PM -0800, Eric Biggers wrote:
> Oh, there's actually a difference between const and non-const
> parameters. A const parameter gives -Wstringop-overread, while a
> non-const one gives -Wstringop-overflow. Only the latter is disabled.

FWIW, I'm hoping we can make the last bit of progress needed to get
-Warray-bounds and -Wstringop-overflow enabled globally after this
patch helps us track down any stragglers:
https://lore.kernel.org/lkml/20251121184342.it.626-kees@xxxxxxxxxx/

-Kees

--
Kees Cook