Replace sprintf()->snprintf() and strcpy()->strlcpy()

The strcpy() and sprintf() functions are deprecated on some platforms.
Care is needed to ensure correct size is used.  If some platforms
miss snprintf, we can add a #define to sprintf, likewise strlcpy().

The biggest change is adding a size parameter to zfs_id_to_fuidstr().

The various *_impl_get() functions are only used on linux and have
not yet been updated.
This commit is contained in:
Jorgen Lundman 2020-06-08 03:42:12 +09:00 committed by Tony Hutter
parent 7b98b55282
commit 04837c8dcb
17 changed files with 66 additions and 50 deletions

View File

@ -330,7 +330,7 @@ aes_impl_init(void)
sizeof (aes_fastest_impl)); sizeof (aes_fastest_impl));
#endif #endif
strcpy(aes_fastest_impl.name, "fastest"); strlcpy(aes_fastest_impl.name, "fastest", AES_IMPL_NAME_MAX);
/* Finish initialization */ /* Finish initialization */
atomic_swap_32(&icp_aes_impl, user_sel_impl); atomic_swap_32(&icp_aes_impl, user_sel_impl);
@ -405,7 +405,7 @@ aes_impl_set(const char *val)
return (err); return (err);
} }
#if defined(_KERNEL) #if defined(_KERNEL) && defined(__linux__)
#include <linux/mod_compat.h> #include <linux/mod_compat.h>
static int static int

View File

@ -857,7 +857,7 @@ gcm_impl_init(void)
sizeof (gcm_fastest_impl)); sizeof (gcm_fastest_impl));
} }
strcpy(gcm_fastest_impl.name, "fastest"); strlcpy(gcm_fastest_impl.name, "fastest", GCM_IMPL_NAME_MAX);
#ifdef CAN_USE_GCM_ASM #ifdef CAN_USE_GCM_ASM
/* /*
@ -969,7 +969,7 @@ gcm_impl_set(const char *val)
return (err); return (err);
} }
#if defined(_KERNEL) #if defined(_KERNEL) && defined(__linux__)
#include <linux/mod_compat.h> #include <linux/mod_compat.h>
static int static int

View File

@ -453,17 +453,19 @@ mod_hash_create_extended(
int sleep) /* whether to sleep for mem */ int sleep) /* whether to sleep for mem */
{ {
mod_hash_t *mod_hash; mod_hash_t *mod_hash;
size_t size;
ASSERT(hname && keycmp && hash_alg && vdtor && kdtor); ASSERT(hname && keycmp && hash_alg && vdtor && kdtor);
if ((mod_hash = kmem_zalloc(MH_SIZE(nchains), sleep)) == NULL) if ((mod_hash = kmem_zalloc(MH_SIZE(nchains), sleep)) == NULL)
return (NULL); return (NULL);
mod_hash->mh_name = kmem_alloc(strlen(hname) + 1, sleep); size = strlen(hname) + 1;
mod_hash->mh_name = kmem_alloc(size, sleep);
if (mod_hash->mh_name == NULL) { if (mod_hash->mh_name == NULL) {
kmem_free(mod_hash, MH_SIZE(nchains)); kmem_free(mod_hash, MH_SIZE(nchains));
return (NULL); return (NULL);
} }
(void) strcpy(mod_hash->mh_name, hname); (void) strlcpy(mod_hash->mh_name, hname, size);
rw_init(&mod_hash->mh_contents, NULL, RW_DEFAULT, NULL); rw_init(&mod_hash->mh_contents, NULL, RW_DEFAULT, NULL);
mod_hash->mh_sleep = sleep; mod_hash->mh_sleep = sleep;

View File

@ -853,9 +853,9 @@ static void addquoted (lua_State *L, luaL_Buffer *b, int arg) {
else if (*s == '\0' || iscntrl(uchar(*s))) { else if (*s == '\0' || iscntrl(uchar(*s))) {
char buff[10]; char buff[10];
if (!isdigit(uchar(*(s+1)))) if (!isdigit(uchar(*(s+1))))
sprintf(buff, "\\%d", (int)uchar(*s)); snprintf(buff, sizeof(buff), "\\%d", (int)uchar(*s));
else else
sprintf(buff, "\\%03d", (int)uchar(*s)); snprintf(buff, sizeof(buff), "\\%03d", (int)uchar(*s));
luaL_addstring(b, buff); luaL_addstring(b, buff);
} }
else else
@ -890,11 +890,11 @@ static const char *scanformat (lua_State *L, const char *strfrmt, char *form) {
/* /*
** add length modifier into formats ** add length modifier into formats
*/ */
static void addlenmod (char *form, const char *lenmod) { static void addlenmod (char *form, const char *lenmod, size_t size) {
size_t l = strlen(form); size_t l = strlen(form);
size_t lm = strlen(lenmod); size_t lm = strlen(lenmod);
char spec = form[l - 1]; char spec = form[l - 1];
strcpy(form + l - 1, lenmod); strlcpy(form + l - 1, lenmod, size - (l - 1));
form[l + lm - 1] = spec; form[l + lm - 1] = spec;
form[l + lm] = '\0'; form[l + lm] = '\0';
} }
@ -931,7 +931,7 @@ static int str_format (lua_State *L) {
lua_Number diff = n - (lua_Number)ni; lua_Number diff = n - (lua_Number)ni;
luaL_argcheck(L, -1 < diff && diff < 1, arg, luaL_argcheck(L, -1 < diff && diff < 1, arg,
"not a number in proper range"); "not a number in proper range");
addlenmod(form, LUA_INTFRMLEN); addlenmod(form, LUA_INTFRMLEN, MAX_FORMAT);
nb = str_sprintf(buff, form, ni); nb = str_sprintf(buff, form, ni);
break; break;
} }
@ -941,7 +941,7 @@ static int str_format (lua_State *L) {
lua_Number diff = n - (lua_Number)ni; lua_Number diff = n - (lua_Number)ni;
luaL_argcheck(L, -1 < diff && diff < 1, arg, luaL_argcheck(L, -1 < diff && diff < 1, arg,
"not a non-negative number in proper range"); "not a non-negative number in proper range");
addlenmod(form, LUA_INTFRMLEN); addlenmod(form, LUA_INTFRMLEN, MAX_FORMAT);
nb = str_sprintf(buff, form, ni); nb = str_sprintf(buff, form, ni);
break; break;
} }
@ -951,7 +951,7 @@ static int str_format (lua_State *L) {
case 'a': case 'A': case 'a': case 'A':
#endif #endif
case 'g': case 'G': { case 'g': case 'G': {
addlenmod(form, LUA_FLTFRMLEN); addlenmod(form, LUA_FLTFRMLEN, MAX_FORMAT);
nb = str_sprintf(buff, form, (LUA_FLTFRM_T)luaL_checknumber(L, arg)); nb = str_sprintf(buff, form, (LUA_FLTFRM_T)luaL_checknumber(L, arg));
break; break;
} }

View File

@ -253,7 +253,7 @@ void
ddt_object_name(ddt_t *ddt, enum ddt_type type, enum ddt_class class, ddt_object_name(ddt_t *ddt, enum ddt_type type, enum ddt_class class,
char *name) char *name)
{ {
(void) sprintf(name, DMU_POOL_DDT, (void) snprintf(name, DDT_NAMELEN, DMU_POOL_DDT,
zio_checksum_table[ddt->ddt_checksum].ci_name, zio_checksum_table[ddt->ddt_checksum].ci_name,
ddt_ops[type]->ddt_op_name, ddt_class_name[class]); ddt_ops[type]->ddt_op_name, ddt_class_name[class]);
} }

View File

@ -1967,14 +1967,15 @@ do_userquota_update(objset_t *os, userquota_cache_t *cache, uint64_t used,
if (subtract) if (subtract)
delta = -delta; delta = -delta;
(void) sprintf(name, "%llx", (longlong_t)user); (void) snprintf(name, sizeof (name), "%llx", (longlong_t)user);
userquota_update_cache(&cache->uqc_user_deltas, name, delta); userquota_update_cache(&cache->uqc_user_deltas, name, delta);
(void) sprintf(name, "%llx", (longlong_t)group); (void) snprintf(name, sizeof (name), "%llx", (longlong_t)group);
userquota_update_cache(&cache->uqc_group_deltas, name, delta); userquota_update_cache(&cache->uqc_group_deltas, name, delta);
if (dmu_objset_projectquota_enabled(os)) { if (dmu_objset_projectquota_enabled(os)) {
(void) sprintf(name, "%llx", (longlong_t)project); (void) snprintf(name, sizeof (name), "%llx",
(longlong_t)project);
userquota_update_cache(&cache->uqc_project_deltas, userquota_update_cache(&cache->uqc_project_deltas,
name, delta); name, delta);
} }
@ -2537,7 +2538,7 @@ dmu_snapshot_list_next(objset_t *os, int namelen, char *name,
return (SET_ERROR(ENAMETOOLONG)); return (SET_ERROR(ENAMETOOLONG));
} }
(void) strcpy(name, attr.za_name); (void) strlcpy(name, attr.za_name, namelen);
if (idp) if (idp)
*idp = attr.za_first_integer; *idp = attr.za_first_integer;
if (case_conflict) if (case_conflict)
@ -2582,7 +2583,7 @@ dmu_dir_list_next(objset_t *os, int namelen, char *name,
return (SET_ERROR(ENAMETOOLONG)); return (SET_ERROR(ENAMETOOLONG));
} }
(void) strcpy(name, attr.za_name); (void) strlcpy(name, attr.za_name, namelen);
if (idp) if (idp)
*idp = attr.za_first_integer; *idp = attr.za_first_integer;
zap_cursor_advance(&cursor); zap_cursor_advance(&cursor);

View File

@ -846,7 +846,7 @@ void
dsl_dataset_name(dsl_dataset_t *ds, char *name) dsl_dataset_name(dsl_dataset_t *ds, char *name)
{ {
if (ds == NULL) { if (ds == NULL) {
(void) strcpy(name, "mos"); (void) strlcpy(name, "mos", ZFS_MAX_DATASET_NAME_LEN);
} else { } else {
dsl_dir_name(ds->ds_dir, name); dsl_dir_name(ds->ds_dir, name);
VERIFY0(dsl_dataset_get_snapname(ds)); VERIFY0(dsl_dataset_get_snapname(ds));
@ -2161,9 +2161,12 @@ get_receive_resume_stats_impl(dsl_dataset_t *ds)
zio_cksum_t cksum; zio_cksum_t cksum;
fletcher_4_native_varsize(compressed, compressed_size, &cksum); fletcher_4_native_varsize(compressed, compressed_size, &cksum);
str = kmem_alloc(compressed_size * 2 + 1, KM_SLEEP); size_t alloc_size = compressed_size * 2 + 1;
str = kmem_alloc(alloc_size, KM_SLEEP);
for (int i = 0; i < compressed_size; i++) { for (int i = 0; i < compressed_size; i++) {
(void) sprintf(str + i * 2, "%02x", compressed[i]); size_t offset = i * 2;
(void) snprintf(str + offset, alloc_size - offset,
"%02x", compressed[i]);
} }
str[compressed_size * 2] = '\0'; str[compressed_size * 2] = '\0';
char *propval = kmem_asprintf("%u-%llx-%llx-%s", char *propval = kmem_asprintf("%u-%llx-%llx-%s",
@ -2171,7 +2174,7 @@ get_receive_resume_stats_impl(dsl_dataset_t *ds)
(longlong_t)cksum.zc_word[0], (longlong_t)cksum.zc_word[0],
(longlong_t)packed_size, str); (longlong_t)packed_size, str);
kmem_free(packed, packed_size); kmem_free(packed, packed_size);
kmem_free(str, compressed_size * 2 + 1); kmem_free(str, alloc_size);
kmem_free(compressed, packed_size); kmem_free(compressed, packed_size);
return (propval); return (propval);
} }
@ -3573,7 +3576,8 @@ dsl_dataset_promote(const char *name, char *conflsnap)
*/ */
snap_pair = nvlist_next_nvpair(ddpa.err_ds, NULL); snap_pair = nvlist_next_nvpair(ddpa.err_ds, NULL);
if (snap_pair != NULL && conflsnap != NULL) if (snap_pair != NULL && conflsnap != NULL)
(void) strcpy(conflsnap, nvpair_name(snap_pair)); (void) strlcpy(conflsnap, nvpair_name(snap_pair),
ZFS_MAX_DATASET_NAME_LEN);
fnvlist_free(ddpa.err_ds); fnvlist_free(ddpa.err_ds);
return (error); return (error);

View File

@ -234,7 +234,8 @@ dsl_dir_hold_obj(dsl_pool_t *dp, uint64_t ddobj,
if (err != 0) if (err != 0)
goto errout; goto errout;
} else { } else {
(void) strcpy(dd->dd_myname, spa_name(dp->dp_spa)); (void) strlcpy(dd->dd_myname, spa_name(dp->dp_spa),
sizeof (dd->dd_myname));
} }
if (dsl_dir_is_clone(dd)) { if (dsl_dir_is_clone(dd)) {
@ -394,7 +395,7 @@ getcomponent(const char *path, char *component, const char **nextp)
return (SET_ERROR(EINVAL)); return (SET_ERROR(EINVAL));
if (strlen(path) >= ZFS_MAX_DATASET_NAME_LEN) if (strlen(path) >= ZFS_MAX_DATASET_NAME_LEN)
return (SET_ERROR(ENAMETOOLONG)); return (SET_ERROR(ENAMETOOLONG));
(void) strcpy(component, path); (void) strlcpy(component, path, ZFS_MAX_DATASET_NAME_LEN);
p = NULL; p = NULL;
} else if (p[0] == '/') { } else if (p[0] == '/') {
if (p - path >= ZFS_MAX_DATASET_NAME_LEN) if (p - path >= ZFS_MAX_DATASET_NAME_LEN)

View File

@ -130,8 +130,9 @@ dsl_prop_get_dd(dsl_dir_t *dd, const char *propname,
if (inheriting) { if (inheriting) {
dsl_dir_name(dd, setpoint); dsl_dir_name(dd, setpoint);
} else { } else {
(void) strcpy(setpoint, (void) strlcpy(setpoint,
ZPROP_SOURCE_VAL_RECVD); ZPROP_SOURCE_VAL_RECVD,
MAXNAMELEN);
} }
} }
break; break;
@ -204,8 +205,9 @@ dsl_prop_get_ds(dsl_dataset_t *ds, const char *propname,
strfree(recvdstr); strfree(recvdstr);
if (err != ENOENT) { if (err != ENOENT) {
if (setpoint != NULL && err == 0) if (setpoint != NULL && err == 0)
(void) strcpy(setpoint, (void) strlcpy(setpoint,
ZPROP_SOURCE_VAL_RECVD); ZPROP_SOURCE_VAL_RECVD,
MAXNAMELEN);
return (err); return (err);
} }
} }

View File

@ -358,7 +358,7 @@ scan_init(void)
for (int i = 0; i < SPA_DVAS_PER_BP; i++) { for (int i = 0; i < SPA_DVAS_PER_BP; i++) {
char name[36]; char name[36];
(void) sprintf(name, "sio_cache_%d", i); (void) snprintf(name, sizeof (name), "sio_cache_%d", i);
sio_cache[i] = kmem_cache_create(name, sio_cache[i] = kmem_cache_create(name,
(sizeof (scan_io_t) + ((i + 1) * sizeof (dva_t))), (sizeof (scan_io_t) + ((i + 1) * sizeof (dva_t))),
0, NULL, NULL, NULL, NULL, NULL, 0); 0, NULL, NULL, NULL, NULL, NULL, 0);

View File

@ -101,9 +101,9 @@ dsl_dataset_user_hold_check(void *arg, dmu_tx_t *tx)
size_t len = strlen(nvpair_name(pair)) + size_t len = strlen(nvpair_name(pair)) +
strlen(fnvpair_value_string(pair)); strlen(fnvpair_value_string(pair));
char *nameval = kmem_zalloc(len + 2, KM_SLEEP); char *nameval = kmem_zalloc(len + 2, KM_SLEEP);
(void) strcpy(nameval, nvpair_name(pair)); (void) strlcpy(nameval, nvpair_name(pair), len + 2);
(void) strcat(nameval, "@"); (void) strlcat(nameval, "@", len + 2);
(void) strcat(nameval, fnvpair_value_string(pair)); (void) strlcat(nameval, fnvpair_value_string(pair), len + 2);
fnvlist_add_string(tmp_holds, nameval, ""); fnvlist_add_string(tmp_holds, nameval, "");
kmem_free(nameval, len + 2); kmem_free(nameval, len + 2);
} }

View File

@ -6169,8 +6169,8 @@ spa_vdev_attach(spa_t *spa, uint64_t guid, nvlist_t *nvroot, int replacing)
spa_strfree(oldvd->vdev_path); spa_strfree(oldvd->vdev_path);
oldvd->vdev_path = kmem_alloc(strlen(newvd->vdev_path) + 5, oldvd->vdev_path = kmem_alloc(strlen(newvd->vdev_path) + 5,
KM_SLEEP); KM_SLEEP);
(void) sprintf(oldvd->vdev_path, "%s/%s", (void) snprintf(oldvd->vdev_path, strlen(newvd->vdev_path) + 5,
newvd->vdev_path, "old"); "%s/%s", newvd->vdev_path, "old");
if (oldvd->vdev_devid != NULL) { if (oldvd->vdev_devid != NULL) {
spa_strfree(oldvd->vdev_devid); spa_strfree(oldvd->vdev_devid);
oldvd->vdev_devid = NULL; oldvd->vdev_devid = NULL;

View File

@ -1030,7 +1030,7 @@ zap_value_search(objset_t *os, uint64_t zapobj, uint64_t value, uint64_t mask,
(err = zap_cursor_retrieve(&zc, za)) == 0; (err = zap_cursor_retrieve(&zc, za)) == 0;
zap_cursor_advance(&zc)) { zap_cursor_advance(&zc)) {
if ((za->za_first_integer & mask) == (value & mask)) { if ((za->za_first_integer & mask) == (value & mask)) {
(void) strcpy(name, za->za_name); (void) strlcpy(name, za->za_name, MAXNAMELEN);
break; break;
} }
} }

View File

@ -1602,7 +1602,8 @@ zap_cursor_retrieve(zap_cursor_t *zc, zap_attribute_t *za)
za->za_integer_length = 8; za->za_integer_length = 8;
za->za_num_integers = 1; za->za_num_integers = 1;
za->za_first_integer = mzep->mze_value; za->za_first_integer = mzep->mze_value;
(void) strcpy(za->za_name, mzep->mze_name); (void) strlcpy(za->za_name, mzep->mze_name,
sizeof (za->za_name));
zc->zc_hash = mze->mze_hash; zc->zc_hash = mze->mze_hash;
zc->zc_cd = mze->mze_cd; zc->zc_cd = mze->mze_cd;
err = 0; err = 0;

View File

@ -81,13 +81,13 @@ get_objset_type_name(dsl_dataset_t *ds, char *str)
return (error); return (error);
switch (type) { switch (type) {
case ZFS_TYPE_SNAPSHOT: case ZFS_TYPE_SNAPSHOT:
(void) strcpy(str, "snapshot"); (void) strlcpy(str, "snapshot", ZAP_MAXVALUELEN);
break; break;
case ZFS_TYPE_FILESYSTEM: case ZFS_TYPE_FILESYSTEM:
(void) strcpy(str, "filesystem"); (void) strlcpy(str, "filesystem", ZAP_MAXVALUELEN);
break; break;
case ZFS_TYPE_VOLUME: case ZFS_TYPE_VOLUME:
(void) strcpy(str, "volume"); (void) strlcpy(str, "volume", ZAP_MAXVALUELEN);
break; break;
default: default:
return (EINVAL); return (EINVAL);
@ -399,11 +399,11 @@ get_special_prop(lua_State *state, dsl_dataset_t *ds, const char *dsname,
break; break;
case ZFS_PROP_FILESYSTEM_COUNT: case ZFS_PROP_FILESYSTEM_COUNT:
error = dsl_dir_get_filesystem_count(ds->ds_dir, &numval); error = dsl_dir_get_filesystem_count(ds->ds_dir, &numval);
(void) strcpy(setpoint, ""); (void) strlcpy(setpoint, "", ZFS_MAX_DATASET_NAME_LEN);
break; break;
case ZFS_PROP_SNAPSHOT_COUNT: case ZFS_PROP_SNAPSHOT_COUNT:
error = dsl_dir_get_snapshot_count(ds->ds_dir, &numval); error = dsl_dir_get_snapshot_count(ds->ds_dir, &numval);
(void) strcpy(setpoint, ""); (void) strlcpy(setpoint, "", ZFS_MAX_DATASET_NAME_LEN);
break; break;
case ZFS_PROP_NUMCLONES: case ZFS_PROP_NUMCLONES:
numval = dsl_get_numclones(ds); numval = dsl_get_numclones(ds);
@ -445,7 +445,8 @@ get_special_prop(lua_State *state, dsl_dataset_t *ds, const char *dsname,
sizeof (numval), 1, &numval); sizeof (numval), 1, &numval);
} }
if (error == 0) if (error == 0)
(void) strcpy(setpoint, dsname); (void) strlcpy(setpoint, dsname,
ZFS_MAX_DATASET_NAME_LEN);
break; break;
case ZFS_PROP_VOLBLOCKSIZE: { case ZFS_PROP_VOLBLOCKSIZE: {
@ -766,9 +767,10 @@ parse_written_prop(const char *dataset_name, const char *prop_name,
ASSERT(zfs_prop_written(prop_name)); ASSERT(zfs_prop_written(prop_name));
const char *name = prop_name + ZFS_WRITTEN_PROP_PREFIX_LEN; const char *name = prop_name + ZFS_WRITTEN_PROP_PREFIX_LEN;
if (strchr(name, '@') == NULL) { if (strchr(name, '@') == NULL) {
(void) sprintf(snap_name, "%s@%s", dataset_name, name); (void) snprintf(snap_name, ZFS_MAX_DATASET_NAME_LEN, "%s@%s",
dataset_name, name);
} else { } else {
(void) strcpy(snap_name, name); (void) strlcpy(snap_name, name, ZFS_MAX_DATASET_NAME_LEN);
} }
} }

View File

@ -2557,7 +2557,8 @@ zfs_prop_set_special(const char *dsname, zprop_source_t source,
zfs_cmd_t *zc; zfs_cmd_t *zc;
zc = kmem_zalloc(sizeof (zfs_cmd_t), KM_SLEEP); zc = kmem_zalloc(sizeof (zfs_cmd_t), KM_SLEEP);
(void) strcpy(zc->zc_name, dsname); (void) strlcpy(zc->zc_name, dsname,
sizeof (zc->zc_name));
(void) zfs_ioc_userspace_upgrade(zc); (void) zfs_ioc_userspace_upgrade(zc);
(void) zfs_ioc_id_quota_upgrade(zc); (void) zfs_ioc_id_quota_upgrade(zc);
kmem_free(zc, sizeof (zfs_cmd_t)); kmem_free(zc, sizeof (zfs_cmd_t));
@ -5069,7 +5070,7 @@ zfs_ioc_recv_new(const char *fsname, nvlist_t *innvl, nvlist_t *outnvl)
strchr(snapname, '%')) strchr(snapname, '%'))
return (SET_ERROR(EINVAL)); return (SET_ERROR(EINVAL));
(void) strcpy(tofs, snapname); (void) strlcpy(tofs, snapname, sizeof (tofs));
tosnap = strchr(tofs, '@'); tosnap = strchr(tofs, '@');
*tosnap++ = '\0'; *tosnap++ = '\0';

View File

@ -203,11 +203,13 @@ zio_init(void)
if (align != 0) { if (align != 0) {
char name[36]; char name[36];
(void) sprintf(name, "zio_buf_%lu", (ulong_t)size); (void) snprintf(name, sizeof (name), "zio_buf_%lu",
(ulong_t)size);
zio_buf_cache[c] = kmem_cache_create(name, size, zio_buf_cache[c] = kmem_cache_create(name, size,
align, NULL, NULL, NULL, NULL, NULL, cflags); align, NULL, NULL, NULL, NULL, NULL, cflags);
(void) sprintf(name, "zio_data_buf_%lu", (ulong_t)size); (void) snprintf(name, sizeof (name), "zio_data_buf_%lu",
(ulong_t)size);
zio_data_buf_cache[c] = kmem_cache_create(name, size, zio_data_buf_cache[c] = kmem_cache_create(name, size,
align, NULL, NULL, NULL, NULL, align, NULL, NULL, NULL, NULL,
data_alloc_arena, data_cflags); data_alloc_arena, data_cflags);