[PATCH 0/3] net: use strnstr() for lwip_strnstr()

Tom Rini trini at konsulko.com
Mon Jan 20 21:52:24 CET 2025


On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote:

> Using strstr() instead of strnstr() creates a security concern.
> 
> * Implement missing library function strnstr() and add unit tests.
> * Use it for lwIP.
> 
> Heinrich Schuchardt (3):
>   lib: implement strnstr()
>   test: unit tests for strstr() and strnstr()
>   net: use strnstr() for lwip_strnstr()
> 
> [...]

Applied to u-boot/master, thanks!

-- 
Tom




More information about the U-Boot mailing list