Andrew Goodbody b83f865e75 cmd: elf: Prevent possible buffer overflow ...

In do_bootvx the environment variable 'bootdev' is fetched and copied
into a buffer without confirming that it will not overflow that buffer.
Use strlcpy to ensure that the buffer will not be overflowed.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody <andrew.goodbody@linaro.org>

2025-07-28 13:04:42 -06:00

8.6 KiB

Raw Permalink Blame History

View Raw