Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Kees Cook :tux: (kees@fosstodon.org)'s status on Saturday, 20-Jan-2024 23:33:59 JST Kees Cook :tux:

After 4 years the strlcpy() API has been fully removed from the Linux kernel. Long live strscpy().
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d26270061ae66b915138af7cd73ca6f8b85e6b44
Next up, strncpy()!
https://github.com/KSPP/linux/issues/90
In conversation about a year ago from fosstodon.org permalink
Attachments
1. Untitled attachment
2. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  
  Remove all strncpy() uses · Issue #90 · KSPP/linux
  
  The strncpy() function is actively dangerous to use since it may not NUL-terminate the destination string, resulting in potential memory content exposures, unbounded reads, or crashes. Replacing us...
- Haelwenn /элвэн/ :triskell: likes this.

Feeds