[PATCH 0/3] net: use strnstr() for lwip_strnstr()
Tom Rini
trini at konsulko.com
Mon Jan 20 21:54:00 CET 2025
On Mon, Jan 20, 2025 at 02:52:24PM -0600, Tom Rini wrote:
> On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote:
>
> > Using strstr() instead of strnstr() creates a security concern.
> >
> > * Implement missing library function strnstr() and add unit tests.
> > * Use it for lwIP.
> >
> > Heinrich Schuchardt (3):
> > lib: implement strnstr()
> > test: unit tests for strstr() and strnstr()
> > net: use strnstr() for lwip_strnstr()
> >
> > [...]
>
> Applied to u-boot/master, thanks!
This was premature, sorry, I need to re-test this in Azure before
pushing.
--
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20250120/297db083/attachment.sig>
More information about the U-Boot
mailing list