[PATCH 0/3] net: use strnstr() for lwip_strnstr()

Tom Rini trini at konsulko.com
Mon Jan 20 21:54:00 CET 2025


On Mon, Jan 20, 2025 at 02:52:24PM -0600, Tom Rini wrote:
> On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote:
> 
> > Using strstr() instead of strnstr() creates a security concern.
> > 
> > * Implement missing library function strnstr() and add unit tests.
> > * Use it for lwIP.
> > 
> > Heinrich Schuchardt (3):
> >   lib: implement strnstr()
> >   test: unit tests for strstr() and strnstr()
> >   net: use strnstr() for lwip_strnstr()
> > 
> > [...]
> 
> Applied to u-boot/master, thanks!

This was premature, sorry, I need to re-test this in Azure before
pushing.

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20250120/297db083/attachment.sig>


More information about the U-Boot mailing list