]> xenbits.xensource.com Git - xen.git/commitdiff
xen-livepatch: fix parameter name parsing
authorRoger Pau Monné <roger.pau@citrix.com>
Thu, 25 Apr 2024 07:51:57 +0000 (09:51 +0200)
committerJan Beulich <jbeulich@suse.com>
Thu, 25 Apr 2024 07:51:57 +0000 (09:51 +0200)
It's incorrect to restrict strncmp to the length of the command line input
parameter, as then a user passing a rune like:

% xen-livepatch up foo.livepatch

Would match against the "upload" command, because the string comparison has
been truncated to the length of the input argument.  Use strcmp instead which
doesn't truncate.  Otherwise in order to keep using strncmp we would need to
also check strings are of the same length before doing the comparison.

Fixes: 05bb8afedede ('xen-xsplice: Tool to manipulate xsplice payloads')
Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
Acked-by: Anthony PERARD <anthony.perard@citrix.com>
tools/misc/xen-livepatch.c

index 5bf9d9a32b65bf1f6bdcd53ef2f44257a22621bb..2c4f69e596fafc816384c34782f2275a1641700d 100644 (file)
@@ -572,13 +572,13 @@ int main(int argc, char *argv[])
         return 0;
     }
     for ( i = 0; i < ARRAY_SIZE(main_options); i++ )
-        if (!strncmp(main_options[i].name, argv[1], strlen(argv[1])))
+        if (!strcmp(main_options[i].name, argv[1]))
             break;
 
     if ( i == ARRAY_SIZE(main_options) )
     {
         for ( j = 0; j < ARRAY_SIZE(action_options); j++ )
-            if (!strncmp(action_options[j].name, argv[1], strlen(argv[1])))
+            if (!strcmp(action_options[j].name, argv[1]))
                 break;
 
         if ( j == ARRAY_SIZE(action_options) )