Re: [PATCH] tomoyo: reject short exec.envp[] names before suffix checks

From: Tetsuo Handa

Date: Fri Apr 17 2026 - 05:12:23 EST


Thank you for a patch, but I don't think we need to apply this patch.

The caller is

if (!strncmp(left_word, "exec.envp[\"", 11)) {
(...snipped...)
if (!tomoyo_parse_envp(left_word + 11, right_word, envp++)) goto out;
(...snipped...)
}

where the left-hand string is guaranteed to be safely dereferenced.