Second opinion on bug 323

Rob Landley rob at landley.net
Fri Oct 14 00:43:46 UTC 2005


This is a kernel bug in uClinux, not our problem, right?

http://busybox.net/bugs/view.php?id=323

We pass them a valid, properly terminated string pointer to the kernel.  The 
kernel bindly memcpy's 4k of data from that point (instead of doing a 
strncpy), and depending where the pointer is in memory this may result in the 
copy going off the end of memory.

But that's not _our_ bug.  We trigger it, but our behavior is valid.  That 
uClinux kernel with this bug in it needs to be fixed.

Anybody have a different interpretation?

Rob



More information about the busybox mailing list