[PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)
Paul Eggert
eggert@cs.ucla.edu
Mon Dec 4 08:04:00 GMT 2017
Dmitry V. Levin wrote:
> Do people really expect that? Assuming that people are aware
> of linux kernel behaviour, why would they expect that?
These days, it's because strncpy format is obsolete and is not something
programmers are ordinarily aware of. When in doubt (which there seems to be
here), glibc should use null-terminated strings rather than strncpy format.
More information about the Libc-alpha
mailing list