[PATCH 0/3] net: use strnstr() for lwip_strnstr()
Tom Rini
trini at konsulko.com
Mon Jan 20 21:52:24 CET 2025
On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote:
> Using strstr() instead of strnstr() creates a security concern.
>
> * Implement missing library function strnstr() and add unit tests.
> * Use it for lwIP.
>
> Heinrich Schuchardt (3):
> lib: implement strnstr()
> test: unit tests for strstr() and strnstr()
> net: use strnstr() for lwip_strnstr()
>
> [...]
Applied to u-boot/master, thanks!
--
Tom
More information about the U-Boot
mailing list