summaryrefslogtreecommitdiff
path: root/src/fr-proc-error.c
diff options
context:
space:
mode:
authorPablo Barciela <[email protected]>2019-03-20 11:15:17 +0100
committerPablo Barciela <[email protected]>2019-03-21 00:49:04 +0100
commitc16eee505ba1eb4b78a2ae9b1af456b2687250f2 (patch)
tree0869ca9226a03bfeb358f2e1b80196b00d843463 /src/fr-proc-error.c
parentd163a7e4e08d0b4e09a091db613f4ce7a9bf8bb9 (diff)
downloadengrampa-c16eee505ba1eb4b78a2ae9b1af456b2687250f2.tar.bz2
engrampa-c16eee505ba1eb4b78a2ae9b1af456b2687250f2.tar.xz
[Security] fr-process: avoid 'strcpy' and 'strcat'
Use 'g_strlcpy' instead of 'strcpy', and 'g_strlcat' instead of 'strcat' Fixes Clang static analyzer warnings: fr-process.c:696:5: warning: Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119 strcpy(rarfile, argv[2]); ^~~~~~ fr-process.c:698:5: warning: Call to function 'strcat' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcat'. CWE-119 strcat(rarfile, "part1.rar"); ^~~~~~ fr-process.c:705:32: warning: Out of bound memory access (accessed memory precedes memory block) rarfile[strlen(rarfile)-5]=0; ~~~~~~~~~~~~~~~~~~~~~~~~~~^~
Diffstat (limited to 'src/fr-proc-error.c')
0 files changed, 0 insertions, 0 deletions