From e78b10bd27cc4663ea68a6bd11e512354115c8f7 Mon Sep 17 00:00:00 2001 From: Joel Sherrill Date: Fri, 27 Aug 2010 18:06:46 +0000 Subject: 2010-08-27 Joel Sherrill * libcsupport/src/ctermid.c: Add comment explaining that this use of strcpy() is a potential buffer overrun but because the API does not provide a way to know the length of the user provided buffer, there is nothing we can do about it. --- cpukit/ChangeLog | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'cpukit/ChangeLog') diff --git a/cpukit/ChangeLog b/cpukit/ChangeLog index c3489e73db..b7260d6c06 100644 --- a/cpukit/ChangeLog +++ b/cpukit/ChangeLog @@ -1,3 +1,10 @@ +2010-08-27 Joel Sherrill + + * libcsupport/src/ctermid.c: Add comment explaining that this use of + strcpy() is a potential buffer overrun but because the API does not + provide a way to know the length of the user provided buffer, there + is nothing we can do about it. + 2010-08-27 Joel Sherrill * libmisc/shell/main_date.c: Use snprintf() not sprintf(). -- cgit v1.2.3