[PATCH 0/2] audit string fields interface + consumer

[Steve Grubb]

On Wednesday 11 January 2006 13:59, Amy Griffis wrote:
> The new struct allows userspace to supply one or more string fields
> packed in a variable length buffer.  The kernel expects the buffer to
> be neither null-delimited nor null-terminated.

Generally NUL terminated string aren't necessary and waste a byte for each 
string sent. The length in the value section can be used to move the pointer 
along if there are multiple strings. Since you have to go through the copy 
from user interface and can't use these directly, its just as easy to put the 
NUL byte in that piece of code.

-Steve