diff options
| author | Kees Cook <[email protected]> | 2023-08-17 13:22:17 -0700 |
|---|---|---|
| committer | Paul Moore <[email protected]> | 2023-09-12 16:58:40 -0400 |
| commit | 34df25517a9bbec3436ab6f53074bcce9dc3eafc (patch) | |
| tree | e22c444e46fe5fb2b8694abf6e21126199677fbc /scripts/generate_rust_analyzer.py | |
| parent | 0bb80ecc33a8fb5a682236443c1e740d5c917d1d (diff) | |
selinux: Annotate struct sidtab_str_cache with __counted_by
Prepare for the coming implementation by GCC and Clang of the __counted_by
attribute. Flexible array members annotated with __counted_by can have
their accesses bounds-checked at run-time checking via CONFIG_UBSAN_BOUNDS
(for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family
functions).
As found with Coccinelle[1], add __counted_by for struct sidtab_str_cache.
[1] https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci
Cc: Paul Moore <[email protected]>
Cc: Stephen Smalley <[email protected]>
Cc: Eric Paris <[email protected]>
Cc: Ondrej Mosnacek <[email protected]>
Cc: [email protected]
Signed-off-by: Kees Cook <[email protected]>
Reviewed-by: "Gustavo A. R. Silva" <[email protected]>
Signed-off-by: Paul Moore <[email protected]>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions