
20 Jan
2025
20 Jan
'25
9:54 p.m.
On Mon, Jan 20, 2025 at 02:52:24PM -0600, Tom Rini wrote:
On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote:
Using strstr() instead of strnstr() creates a security concern.
- Implement missing library function strnstr() and add unit tests.
- Use it for lwIP.
Heinrich Schuchardt (3): lib: implement strnstr() test: unit tests for strstr() and strnstr() net: use strnstr() for lwip_strnstr()
[...]
Applied to u-boot/master, thanks!
This was premature, sorry, I need to re-test this in Azure before pushing.
--
Tom