linux-hardening - Re: [GIT PULL] strlcpy removal for v6.8-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 19 Jan 2024 16:38:43 -0500
From: Kent Overstreet <kent.overstreet@...ux.dev>
To: Kees Cook <keescook@...omium.org>
Cc: Linus Torvalds <torvalds@...ux-foundation.org>, 
	linux-kernel@...r.kernel.org, Andrew Morton <akpm@...ux-foundation.org>, 
	Andy Shevchenko <andy.shevchenko@...il.com>, Andy Whitcroft <apw@...onical.com>, 
	Azeem Shaikh <azeemshaikh38@...il.com>, Brian Foster <bfoster@...hat.com>, 
	Dwaipayan Ray <dwaipayanray1@...il.com>, Joe Perches <joe@...ches.com>, linux-bcachefs@...r.kernel.org, 
	linux-hardening@...r.kernel.org, Lukas Bulwahn <lukas.bulwahn@...il.com>
Subject: Re: [GIT PULL] strlcpy removal for v6.8-rc1

On Fri, Jan 19, 2024 at 01:14:55PM -0800, Kees Cook wrote:
> Hi Linus,
> 
> Please pull this strlcpy removal for v6.8-rc1. As promised, it is the
> "part 2" of the hardening tree, late in -rc1 now that all the other trees
> with strlcpy() removals have landed. One new user appeared (in bcachefs)
> but was a trivial refactor. The kernel is now free of the strlcpy() API!
> 
> Thanks!
> 
> -Kees
> 
> The following changes since commit b0d326da462e20285236e11e4cbc32085de9f363:
> 
>   Merge tag 'sched-urgent-2024-01-18' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip (2024-01-18 11:57:33 -0800)
> 
> are available in the Git repository at:
> 
>   https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/strlcpy-removal-v6.8-rc1
> 
> for you to fetch changes up to d26270061ae66b915138af7cd73ca6f8b85e6b44:
> 
>   string: Remove strlcpy() (2024-01-19 11:59:11 -0800)
> 
> ----------------------------------------------------------------
> strlcpy removal for v6.8-rc1
> 
> - Remove of the final (very recent) user of strlcpy() (in bcachefs).
> 
> - Remove the strlcpy() API. Long live strscpy().

For the bcachefs patch
Acked-by: Kent Overstreet <kent.overstreet@...ux.dev>