[PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)

Paul Eggert eggert@cs.ucla.edu
Mon Dec 4 08:04:00 GMT 2017


Dmitry V. Levin wrote:
> Do people really expect that?  Assuming that people are aware
> of linux kernel behaviour, why would they expect that?

These days, it's because strncpy format is obsolete and is not something 
programmers are ordinarily aware of. When in doubt (which there seems to be 
here), glibc should use null-terminated strings rather than strncpy format.



More information about the Libc-alpha mailing list