
20 Jan
2025
20 Jan
'25
9:52 p.m.
On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote:
Using strstr() instead of strnstr() creates a security concern.
- Implement missing library function strnstr() and add unit tests.
- Use it for lwIP.
Heinrich Schuchardt (3): lib: implement strnstr() test: unit tests for strstr() and strnstr() net: use strnstr() for lwip_strnstr()
[...]
Applied to u-boot/master, thanks!
--
Tom