Thread (7 messages) 7 messages, 3 authors, 2023-07-26

Re: [PATCH] soc: fsl: qe: Replace all non-returning strlcpy with strscpy

From: Kees Cook <hidden>
Date: 2023-07-26 21:53:29
Also in: linux-hardening, lkml

On Tue, 23 May 2023 02:14:25 +0000, Azeem Shaikh wrote:
strlcpy() reads the entire source buffer first.
This read may exceed the destination size limit.
This is both inefficient and can lead to linear read
overflows if a source string is not NUL-terminated [1].
In an effort to remove strlcpy() completely [2], replace
strlcpy() here with strscpy().
No return values were used, so direct replacement is safe.

[...]
Applied, thanks!

[1/1] soc: fsl: qe: Replace all non-returning strlcpy with strscpy
      (no commit info)

Best regards,
-- 
Kees Cook
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help