From: Jérémie Galarneau Date: Thu, 20 Aug 2020 19:38:18 +0000 (-0400) Subject: Fix: memcpy used on potentially overlapping regions X-Git-Tag: v2.13.0-rc1~489 X-Git-Url: https://git.lttng.org/?p=lttng-tools.git;a=commitdiff_plain;h=6f1105342bcca0c5ba8177ae134c197c19ba215f Fix: memcpy used on potentially overlapping regions Caught by reviewing unrelated code, these two uses of memcpy can operate on overlapping buffers. I checked all other uses of "raw" memcpy and those appear safe. Signed-off-by: Jérémie Galarneau Change-Id: I72b1204bc52a92015042adb6a67b022d140f5b4e --- diff --git a/src/bin/lttng-sessiond/notification-thread-events.c b/src/bin/lttng-sessiond/notification-thread-events.c index 86a114c07..95101178f 100644 --- a/src/bin/lttng-sessiond/notification-thread-events.c +++ b/src/bin/lttng-sessiond/notification-thread-events.c @@ -2869,7 +2869,7 @@ enum client_transmission_status client_flush_outgoing_queue( client->socket); to_send_count -= max(ret, 0); - memcpy(client->communication.outbound.payload.buffer.data, + memmove(client->communication.outbound.payload.buffer.data, pv.buffer.data + pv.buffer.size - to_send_count, to_send_count); diff --git a/src/common/utils.c b/src/common/utils.c index a068e410b..7006a2158 100644 --- a/src/common/utils.c +++ b/src/common/utils.c @@ -294,7 +294,7 @@ int expand_double_slashes_dot_and_dotdot(char *path) * Copy the current token which is neither a '.' nor a '..'. */ path[expanded_path_len++] = '/'; - memcpy(&path[expanded_path_len], curr_char, curr_token_len); + memmove(&path[expanded_path_len], curr_char, curr_token_len); expanded_path_len += curr_token_len; }