37fad8b07e
Replace sprintf() calls with snprintf() to bound writes into the fixed-size filename[] and slnk[] stack buffers. While the current inputs are hash-pinned firmware images, snprintf provides defense in depth against buffer overflows if the format string output ever exceeds buffer capacity. Signed-off-by: OrbisAI Security <mediratta01.pally@gmail.com> Link: https://github.com/openwrt/openwrt/pull/23172 Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com> |
||
|---|---|---|
| .. | ||
| ath10k-ct-firmware | ||
| ath11k-firmware | ||
| broadcom-sprom | ||
| cypress-firmware | ||
| cypress-nvram | ||
| firmware-imx | ||
| intel-microcode | ||
| ipq-wifi | ||
| ixp4xx-microcode | ||
| lantiq | ||
| layerscape | ||
| linux-firmware | ||
| murata-firmware | ||
| murata-nvram | ||
| omnia-mcu-firmware | ||
| prism54-firmware | ||
| rtl826x-firmware | ||
| wireless-regdb | ||