Re: [PATCH iproute2] ss: bound fscanf width when reading comm in user_ent_hash_build_task
From: Stephen Hemminger <stephen@networkplumber.org>
Date: 2026-10-21 02:46:59
On Tue, 20 Oct 2026 15:13:58 -0700 Prashanth Swaminathan [off-list ref] wrote:
No problem. I couldn't find any definitive source on the org's current thinking regarding whether these types of hardening changes, which don't actually cover a security vulnerability, are desirable, so I erred on the side of caution. Apologies for the thrash!
It did motivate me to replace fscanf there, there already is a helper in lib/fs.c just needs some small changes.