Re: [PATCH] tools/leds/uledmon: force NUL-termination of device name

[David Lechner <david@lechnology.com>]

On 11/6/26 4:06 AM, Gu Bin wrote:
> strncpy() does not NUL-terminate when the source is at least as long
> as the bound. uleds_dev.name is passed to the kernel with
> write(fd, &uleds_dev, sizeof(uleds_dev)), so a >= LED_MAX_NAME_SIZE
> byte argv[1] leaves name without a terminator and the write sends
> trailing bytes that are not part of a valid device name.
> 
> Force NUL-termination after the strncpy.
> 
> Fixes: fa7f32422ea1 ("tools/leds: Add uledmon program for monitoring userspace LEDs")
> Signed-off-by: Gu Bin <gubin@cmss.chinamobile.com>
> ---
>  tools/leds/uledmon.c | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/tools/leds/uledmon.c b/tools/leds/uledmon.c
> index c15a39c1f271..6df35b817233 100644
> --- a/tools/leds/uledmon.c
> +++ b/tools/leds/uledmon.c
> @@ -32,6 +32,7 @@ int main(int argc, char const *argv[])
>  	}
>  
>  	strncpy(uleds_dev.name, argv[1], LED_MAX_NAME_SIZE);
> +	uleds_dev.name[LED_MAX_NAME_SIZE - 1] = '\0';
>  	uleds_dev.max_brightness = 100;
>  
>  	fd = open("/dev/uleds", O_RDWR);

This works, but maybe better to just print an error and exit with error code
rather than silently truncating the name?