Re: [PATCH 0/2] audit string fields interface + consumer
On Wednesday 11 January 2006 13:59, Amy Griffis wrote:
The new struct allows userspace to supply one or more string fields
packed in a variable length buffer. The kernel expects the buffer to
be neither null-delimited nor null-terminated.
Generally NUL terminated string aren't necessary and waste a byte for each
string sent. The length in the value section can be used to move the pointer
along if there are multiple strings. Since you have to go through the copy
from user interface and can't use these directly, its just as easy to put the
NUL byte in that piece of code.
-Steve