41 	char *src;  in lkdtm_FORTIFIED_SUBOBJECT()  local
43 	src = kmalloc(size, GFP_KERNEL);  in lkdtm_FORTIFIED_SUBOBJECT()
44 	strscpy(src, "over ten bytes", size);  in lkdtm_FORTIFIED_SUBOBJECT()
45 	size = strlen(src) + 1;  in lkdtm_FORTIFIED_SUBOBJECT()
50 	 * memcpy(target.a, src, 20); will hit a compile error because the  in lkdtm_FORTIFIED_SUBOBJECT()
54 	memcpy(target.a, src, size);  in lkdtm_FORTIFIED_SUBOBJECT()
62 	kfree(src);  in lkdtm_FORTIFIED_SUBOBJECT()
67  * strscpy and generate a panic because there is a write overflow (i.e. src
72 	char *src;  in lkdtm_FORTIFIED_STRSCPY()  local
78 			char src[5];  in lkdtm_FORTIFIED_STRSCPY()  member
81 	char weird_dst[sizeof(weird.src) + 1];  in lkdtm_FORTIFIED_STRSCPY()
83 	src = kstrdup("foobar", GFP_KERNEL);  in lkdtm_FORTIFIED_STRSCPY()
85 	if (src == NULL)  in lkdtm_FORTIFIED_STRSCPY()
89 	if (strscpy(dst, src, 0) != -E2BIG)  in lkdtm_FORTIFIED_STRSCPY()
92 	/* Vanilla strscpy returns -E2BIG if src is truncated. */  in lkdtm_FORTIFIED_STRSCPY()
93 	if (strscpy(dst, src, sizeof(dst)) != -E2BIG)  in lkdtm_FORTIFIED_STRSCPY()
94 		pr_warn("FAIL: strscpy() did not return -E2BIG while src is truncated\n");  in lkdtm_FORTIFIED_STRSCPY()
96 	/* After above call, dst must contain "foob" because src was truncated. */  in lkdtm_FORTIFIED_STRSCPY()
101 	/* Shrink src so the strscpy() below succeeds. */  in lkdtm_FORTIFIED_STRSCPY()
102 	src[3] = '\0';  in lkdtm_FORTIFIED_STRSCPY()
108 	if (strscpy(dst, src, sizeof(dst)) != 3)  in lkdtm_FORTIFIED_STRSCPY()
109 		pr_warn("FAIL: strscpy() did not return 3 while src was copied entirely truncated\n");  in lkdtm_FORTIFIED_STRSCPY()
111 	/* After above call, dst must contain "foo" because src was copied. */  in lkdtm_FORTIFIED_STRSCPY()
116 	/* Test when src is embedded inside a union. */  in lkdtm_FORTIFIED_STRSCPY()
117 	strscpy(weird_dst, weird.src, sizeof(weird_dst));  in lkdtm_FORTIFIED_STRSCPY()
123 	/* Restore src to its initial value. */  in lkdtm_FORTIFIED_STRSCPY()
124 	src[3] = 'b';  in lkdtm_FORTIFIED_STRSCPY()
130 	strscpy(dst, src, strlen(src));  in lkdtm_FORTIFIED_STRSCPY()
135 	kfree(src);  in lkdtm_FORTIFIED_STRSCPY()