Re: [PATCH v3] kconfig/lxdialog: replace strcpy() with strncpy() in inputbox.c
From: Nicolas Schier
Date: Sun Jul 27 2025 - 15:19:42 EST
On Sun, Jul 27, 2025 at 10:14:33PM +0530 Suchit Karunakaran wrote:
> strcpy() performs no bounds checking and can lead to buffer overflows if
> the input string exceeds the destination buffer size. This patch replaces
> it with strncpy(), and null terminates the input string.
>
> Signed-off-by: Suchit Karunakaran <suchitkarunakaran@xxxxxxxxx>
> ---
> scripts/kconfig/lxdialog/inputbox.c | 6 ++++--
> 1 file changed, 4 insertions(+), 2 deletions(-)
Reviewed-by: Nicolas Schier <nicolas.schier@xxxxxxxxx>
thanks for your contribution!
If you want to continue contributing, you might want to check-out tools
like b4 which simplifies sending and tracking patch-sets.
Kind regards,
Nicolas
Attachment:
signature.asc
Description: PGP signature