From: Josephine Pfeiffer Date: Wed, 1 Oct 2025 17:41:04 +0000 (+0200) Subject: s390/sysinfo: Replace sprintf() with snprintf() for buffer safety X-Git-Tag: v6.19-rc1~206^2~43 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4738e1166260fd812faf5fef624b0f9308d8c4d4;p=thirdparty%2Flinux.git s390/sysinfo: Replace sprintf() with snprintf() for buffer safety Replace sprintf() with snprintf() when formatting symlink target name to prevent potential buffer overflow. The link_to buffer is only 10 bytes, and using snprintf() ensures proper bounds checking if the topology nesting limit value is unexpectedly large. Signed-off-by: Josephine Pfeiffer Signed-off-by: Heiko Carstens --- diff --git a/arch/s390/kernel/sysinfo.c b/arch/s390/kernel/sysinfo.c index 1ea84e942bd42..33ca3e47a0e6f 100644 --- a/arch/s390/kernel/sysinfo.c +++ b/arch/s390/kernel/sysinfo.c @@ -526,7 +526,7 @@ static __init int stsi_init_debugfs(void) if (IS_ENABLED(CONFIG_SCHED_TOPOLOGY) && cpu_has_topology()) { char link_to[10]; - sprintf(link_to, "15_1_%d", topology_mnest_limit()); + snprintf(link_to, sizeof(link_to), "15_1_%d", topology_mnest_limit()); debugfs_create_symlink("topology", stsi_root, link_to); } return 0;