scripts/kallsyms: fix memory corruption caused by write over-run (9d1b3895) · Commits · 戴 / test

memcpy() writes one more byte than allocated. Fixes: ("scripts/kallsyms: change table to store (strcut sym_entry *)") Reported-by:

scripts/kallsyms.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -210,7 +210,7 @@ static struct sym_entry read_symbol(FILE in)

		len = strlen(name) + 1;

		sym = malloc(sizeof(*sym) + len);
		sym = malloc(sizeof(*sym) + len + 1);
		if (!sym) {
		fprintf(stderr, "kallsyms failure: "
		"unable to allocate required amount of memory\n");
		@@ -219,7 +219,7 @@ static struct sym_entry read_symbol(FILE in)
		sym->addr = addr;
		sym->len = len;
		sym->sym[0] = type;
		memcpy(sym_name(sym), name, len);
		strcpy(sym_name(sym), name);
		sym->percpu_absolute = 0;

		return sym;