Karel Zak [Wed, 15 Apr 2026 13:53:56 +0000 (15:53 +0200)]
libblkid: nilfs: fix byte order and block size validation
Fix s_dev_size comparison to use le64_to_cpu() for big-endian
architectures. Tighten s_log_block_size check to match kernel limit
(NILFS_MAX_BLOCK_SIZE=65536, max shift 6).
Karel Zak [Wed, 15 Apr 2026 13:48:09 +0000 (15:48 +0200)]
libblkid: udf: cap descriptor sequence iteration count
The descriptor count is derived from attacker-controlled anchor length
and has no upper bound. Cap at 64 -- a UDF volume descriptor sequence
contains only a handful of descriptors (PVD, LVD, USD, IUVD, TD, ...),
similar to the kernel's UDF_MAX_TD_NESTING limit in fs/udf/super.c.
Karel Zak [Wed, 22 Apr 2026 10:23:37 +0000 (12:23 +0200)]
agetty: add cred_read_bool() for credential boolean parsing
Introduce cred_read_bool() helper that reads a systemd credential
file and parses the value as a boolean using ul_strtobool(). The
invert argument allows handling "noissue"-style credentials where
true means the flag should be cleared rather than set.
Addresses: https://github.com/util-linux/util-linux/issues/2255 Signed-off-by: Karel Zak <kzak@redhat.com>
Karel Zak [Wed, 22 Apr 2026 10:21:50 +0000 (12:21 +0200)]
agetty: add cred_read_num() for credential numeric parsing
Introduce cred_read_num() helper that reads a systemd credential
file and parses the value as a number. The type argument selects
between unsigned ('u') and signed ('d') parsing, making it easy
to extend for other numeric types in the future.
Addresses: https://github.com/util-linux/util-linux/issues/2255 Signed-off-by: Karel Zak <kzak@redhat.com>
Karel Zak [Wed, 22 Apr 2026 10:18:08 +0000 (12:18 +0200)]
agetty: add cred_read_str() for credential string parsing
Introduce cred_read_str() helper that reads a systemd credential
file and stores the string value into a struct member addressed
via offsetof(). This replaces the open-coded string credential
handling and prepares for adding more credential types.
Addresses: https://github.com/util-linux/util-linux/issues/2255 Signed-off-by: Karel Zak <kzak@redhat.com>
lslogins: use new lib functions for user/group name parsing
This patch makes use of the new ul_get{grp,userpw}_str lib
functions to parse user/group names passed to the --logins
and --groups options. The use of these functions simplifies
the code base and makes str_to_uint() useless, therefore we
can remove it.
Signed-off-by: Christian Goeschel Ndjomouo <cgoesc2@wgu.edu>
- Remove extra newline in errx messages
- Use fprintf/exit for usage to avoid repeated program name
- Improve signal safety by using appropriate functions
This code is not installed, thus no functional change in final
installation of util-linux.
Karel Zak [Tue, 21 Apr 2026 11:15:38 +0000 (13:15 +0200)]
Merge branch 'fallocate_checks' of https://github.com/stoeckmann/util-linux
* 'fallocate_checks' of https://github.com/stoeckmann/util-linux:
fallocate: Add range check
fallocate: Improve argument range check
fallocate: Use off_t instead of loff_t
fallocate: Remove outdated copyright statement
fallocate: Use correct formatters and casts
Cast off_t for F_ADDRESS to long long. In most cases, this should be
actually unsigned long long due to %llx or %llo, but since %lld is also
available and off_t is signed, keep it at that.
In theory, this might fix very intelligent static analysers which notice
that off_t is long int but %ll expects long long, but in reality, this
fixes 32 bit off_t builds. Without this, wrong addresses are shown.
Eventually, the loff_t values are used as arguments for functions which
expect an off_t. Use off_t directly and, while at it, introduce a proper
range check in cvtnum.
Check st.st_size (off_t) for actual file size instead of the possibly
already truncated entry->size (unsigned int) value. Otherwise files
larger than 4 GB might be silently truncated.
libblkid: introduce sysfs_devno_is_dm_hidden() for pre-open check
Stratis reuses the DM "private" UUID convention ("stratis-1-private")
but its devices are legitimately opened by tools like mkfs.xfs to
obtain device geometry. The pre-open check added in the previous
commit (d05a84b22) used sysfs_devno_is_dm_private() which also
blocks Stratis devices, breaking mkfs.xfs on Stratis pools.
Introduce sysfs_devno_is_dm_hidden() which only checks for LVM
internal devices (the "LVM-<uuid>-<name>" UUID pattern). A "hidden"
DM device is one that exists solely as a building block for another
DM target -- no user-space tool should normally open or write to it.
Use sysfs_devno_is_dm_hidden() in blkid_new_probe_from_filename()
so that Stratis devices remain accessible while LVM internal devices
are still skipped before open().
Karel Zak [Thu, 16 Apr 2026 12:59:33 +0000 (14:59 +0200)]
Merge branch 'copyfilerange_syscall_fallback' of https://github.com/cgoesche/util-linux-fork
* 'copyfilerange_syscall_fallback' of https://github.com/cgoesche/util-linux-fork:
build: (copyfilerange) include syscall header check for fallback
style: (misc-utils/copyfilerange.c) fix indentation
include: (fileutils.h) add fallback for the copy_file_range syscall
Karel Zak [Thu, 16 Apr 2026 12:25:14 +0000 (14:25 +0200)]
nsenter: update shell selection documentation
Update DESCRIPTION and add ENVIRONMENT section with SHELL entry,
documenting that when $SHELL is not set, the shell from the user's
passwd(5) entry is used before falling back to /bin/sh.
Addresses: https://github.com/util-linux/util-linux/issues/4242 Signed-off-by: Karel Zak <kzak@redhat.com>
Karel Zak [Thu, 16 Apr 2026 12:25:10 +0000 (14:25 +0200)]
unshare: update shell selection documentation
Update DESCRIPTION and add ENVIRONMENT section with SHELL entry,
documenting that when $SHELL is not set, the shell from the user's
passwd(5) entry is used before falling back to /bin/sh.
Addresses: https://github.com/util-linux/util-linux/issues/4242 Signed-off-by: Karel Zak <kzak@redhat.com>
Karel Zak [Thu, 16 Apr 2026 12:25:03 +0000 (14:25 +0200)]
flock: document shell selection in man page
Add ENVIRONMENT section with SHELL entry, documenting that flock uses
$SHELL with fallback to /bin/sh for non-interactive -c command
execution. The user's passwd(5) shell is not consulted.
Addresses: https://github.com/util-linux/util-linux/issues/4242 Signed-off-by: Karel Zak <kzak@redhat.com>
Karel Zak [Thu, 16 Apr 2026 12:24:42 +0000 (14:24 +0200)]
scriptlive: update shell selection documentation
Document that when $SHELL is not set, the shell from the user's
passwd(5) entry is used before falling back to /bin/sh. Add missing
SHELL entry to the ENVIRONMENT section.
Addresses: https://github.com/util-linux/util-linux/issues/4242 Signed-off-by: Karel Zak <kzak@redhat.com>
flock: re-enable the initial shell selection logic
Commit 6651ae5 added /etc/passwd to the list of shells
to choose from before falling back to _PATH_BSHELL.
This introduced a regression as some tools dont expect
this behavior and assume that unsetting SHELLS is enough.
To re-establish the old behavior we can pass the UL_SHELL_NOPWD
flag to the ul_default_shell() helper to ignore shells in
/etc/passwd.
Addresses: #4242 Signed-off-by: Christian Goeschel Ndjomouo <cgoesc2@wgu.edu>
Karel Zak [Wed, 15 Apr 2026 11:53:09 +0000 (13:53 +0200)]
Merge branch 'PR/irqtop-slang-vw_printw' of https://github.com/karelzak/util-linux-work
* 'PR/irqtop-slang-vw_printw' of https://github.com/karelzak/util-linux-work:
irqtop: use irqtop_puts() for pre-formatted table data
irqtop: add vw_printw() fallback for slang builds
Karel Zak [Wed, 15 Apr 2026 11:32:52 +0000 (13:32 +0200)]
Merge branch 'randutils' of https://github.com/stoeckmann/util-linux
* 'randutils' of https://github.com/stoeckmann/util-linux:
randutils: Move comment to correct place
randutils: Keep track of randomness source
randutils: Reduce function and macro visibility
randutils: Remove unused rand_get_number
Karel Zak [Wed, 15 Apr 2026 11:07:05 +0000 (13:07 +0200)]
Merge branch 'printf-integers' of https://github.com/t-8ch/util-linux
* 'printf-integers' of https://github.com/t-8ch/util-linux:
fdisk: use the correct format specifiers for integer types
lib/procfs: return uint64_t from procfs_process_get_stat_nth()
chrt: pass correct integer types to printf
hardlink: avoid format string error for dev_t
strutils: fix printf formats
Karel Zak [Wed, 15 Apr 2026 11:01:36 +0000 (13:01 +0200)]
Merge branch 'kill_decode_test_known_fail' of https://github.com/cgoesche/util-linux-fork
* 'kill_decode_test_known_fail' of https://github.com/cgoesche/util-linux-fork:
tests: (kill/decode) mark test as known-fail for inconsistent s390x/QEMU instances
Karel Zak [Wed, 15 Apr 2026 10:37:38 +0000 (12:37 +0200)]
Merge branch 'ci/meson' of https://github.com/t-8ch/util-linux
* 'ci/meson' of https://github.com/t-8ch/util-linux:
ci: drop dependency from meson to autotools jobs
ci: run CHECK phase for meson
ci: run 'make checkusage' only for autotools build
meson: build test_scols_termreduce
The mcookie utility wants to report the source of randomness, but even
prints getrandom if it failed to retrieve data through it.
Fix this modifying the return data type of ul_random_get_bytes. Instead
of returning a boolean, the actual source is returned. This avoids any
potential TOCTOU or erroneous output.
projects / thirdparty / util-linux.git / log
