Re: [PATCH v2 6/6] scsi: ufs: debugfs: Reserve space for a string terminator

From: Peter Wang (王信友)

Date: Mon Jul 20 2026 - 05:22:52 EST


On Fri, 2026-07-17 at 23:39 +0800, Li Qiang wrote:
> ufs_saved_err_write() copies user input into a zero-initialized stack
> buffer and passes it to kstrtoint(). A write that fills the entire
> buffer overwrites its only terminator.
>
> Reject an input whose length leaves no room for the trailing NUL.
>
> Fixes: 7340faae9474 ("scsi: ufs: core: Add debugfs attributes for
> triggering the UFS EH")
> Signed-off-by: Li Qiang <liqiang01@xxxxxxxxxx>
> ---

Reviewed-by: Peter Wang <peter.wang@xxxxxxxxxxxx>