From owner-freebsd-usb@FreeBSD.ORG  Sun Sep  6 06:10:03 2009
Return-Path: <owner-freebsd-usb@FreeBSD.ORG>
Delivered-To: freebsd-usb@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D1F2E106566C
	for <freebsd-usb@hub.freebsd.org>; Sun,  6 Sep 2009 06:10:03 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id C0A378FC15
	for <freebsd-usb@hub.freebsd.org>; Sun,  6 Sep 2009 06:10:03 +0000 (UTC)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n866A3DE081258
	for <freebsd-usb@freefall.freebsd.org>; Sun, 6 Sep 2009 06:10:03 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n866A3ic081257;
	Sun, 6 Sep 2009 06:10:03 GMT (envelope-from gnats)
Date: Sun, 6 Sep 2009 06:10:03 GMT
Message-Id: <200909060610.n866A3ic081257@freefall.freebsd.org>
To: freebsd-usb@FreeBSD.org
From: Hans Petter Selasky <hselasky@c2i.net>
Cc: 
Subject: Re: usb/138559: [usb8] uether sysctl handler doesn't NUL-terminate
	the string
X-BeenThere: freebsd-usb@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Hans Petter Selasky <hselasky@c2i.net>
List-Id: FreeBSD support for USB <freebsd-usb.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-usb>,
	<mailto:freebsd-usb-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-usb>
List-Post: <mailto:freebsd-usb@freebsd.org>
List-Help: <mailto:freebsd-usb-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-usb>,
	<mailto:freebsd-usb-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 06 Sep 2009 06:10:03 -0000

The following reply was made to PR usb/138559; it has been noted by GNATS.

From: Hans Petter Selasky <hselasky@c2i.net>
To: freebsd-usb@freebsd.org
Cc: Bruce Cran <bruce@cran.org.uk>,
 freebsd-gnats-submit@freebsd.org
Subject: Re: usb/138559: [usb8] uether sysctl handler doesn't NUL-terminate the string
Date: Sun, 6 Sep 2009 08:07:58 +0200

 On Sunday 06 September 2009 00:14:04 Bruce Cran wrote:
 > >Number:         138559
 > >Category:       usb
 > >Synopsis:       [usb8] uether sysctl handler doesn't NUL-terminate the
 > > string Confidential:   no
 > >Severity:       non-critical
 > >Priority:       low
 > >Responsible:    freebsd-usb
 > >State:          open
 > >Quarter:
 > >Keywords:
 > >Date-Required:
 > >Class:          sw-bug
 > >Submitter-Id:   current-users
 > >Arrival-Date:   Sat Sep 05 22:20:03 UTC 2009
 > >Closed-Date:
 > >Last-Modified:
 > >Originator:     Bruce Cran
 > >Release:        8.0-BETA3
 > >Organization:
 > >Environment:
 >
 > FreeBSD gluon.draftnet 8.0-BETA3 FreeBSD 8.0-BETA3 #1: Fri Sep  4 09:20:32
 > BST 2009     brucec@gluon.draftnet:/usr/obj/usr/src/sys/GENERIC  i386
 >
 > >Description:
 >
 > The sysctl handler in sys/dev/usb/net/usb_ethernet.c line 143 doesn't
 > NUL-terminate the sysctl string returned to the user because it passes the
 > length as "strlen(name)" instead of "strlen(name)+1".
 >
 > >How-To-Repeat:
 > >
 > >Fix:
 >
 > Patch attached with submission follows:
 >
 > --- usb_ethernet.c.orig	2009-09-05 21:35:09.000000000 +0100
 > +++ usb_ethernet.c	2009-09-05 21:36:18.000000000 +0100
 > @@ -146,7 +146,7 @@
 >  	const char *name;
 >
 >  	name = device_get_nameunit(ue->ue_dev);
 > -	return SYSCTL_OUT(req, name, strlen(name));
 > +	return SYSCTL_OUT(req, name, strlen(name) + 1);
 >  }
 >
 >  int
 >
 > >Release-Note:
 > >Audit-Trail:
 > >Unformatted:
 
 Hi,
 
 When plugging an USB ethernet adapter and printing out all sysctls, the parent 
 string does not look corrupt. Are you sure that the terminating zero is not 
 inserted somewhere else?
 
 --HPS