Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
use strlcpy()i rather than strcpy() (CIDs #1618878-#161880)
command_encode_dns_label(), command_radmin_add(), and command_encode_raw() all strcpy() the incoming string in to a local fixed-size buffer buffer. The callers all pass a pointer to a buffer no bigger than the local buffer, but Coverity apparently cannot tell that. (It looks like all calls to hem are made through an array of structures--perhaps that's why.) To pacify Coverity, we switch from strcpy() to strlcpy(), which takes an extra parameter to let us guarantee it won't overrun buffer.
- Loading branch information