]> git.ipfire.org Git - thirdparty/libcgroup.git/commit
api.c: add precision to fscanf(), in cgroup_get_current_controller_path()
authorKamalesh Babulal <kamalesh.babulal@oracle.com>
Wed, 10 Aug 2022 16:52:09 +0000 (10:52 -0600)
committerTom Hromatka <tom.hromatka@oracle.com>
Wed, 10 Aug 2022 16:53:06 +0000 (10:53 -0600)
commitac05eb49c498aa5047070a4620456fa7a10e1910
tree4977bcbc2c37203b2b1ba8d8d8c825c767484ebc
parent04169a9bef0ee77c18cd5a2e2d9f6e49f6057e32
api.c: add precision to fscanf(), in cgroup_get_current_controller_path()

Fix calling risky function warning, reported by Coverity tool:

CID 258301 (#1 of 1): Calling risky function
(DC.STREAM_BUFFER)dont_call: fscanf assumes an arbitrarily long string,
so callers must use correct precision specifiers or never use fscanf.

As per secure coding standard, using '%s' in the fscanf() is not
recommend, hence fix it by using the precision of macro
FILENAME_MAX borrowed from Linux Kernel for the maximum
allowed controller/subsys_name length.

Signed-off-by: Kamalesh Babulal <kamalesh.babulal@oracle.com>
Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>
TJH: Small fix in the commit comment.
src/api.c