linux-bluetooth.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH BlueZ] client/assistant: Use strnlen() instead of strlen()
@ 2025-09-05 13:49 Roman Smirnov
  2025-09-05 15:15 ` [BlueZ] " bluez.test.bot
  2025-09-09 20:50 ` [PATCH BlueZ] " patchwork-bot+bluetooth
  0 siblings, 2 replies; 3+ messages in thread
From: Roman Smirnov @ 2025-09-05 13:49 UTC (permalink / raw)
  To: linux-bluetooth; +Cc: Roman Smirnov

Using strlen() can lead to undefined behavior.
---
 client/assistant.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/assistant.c b/client/assistant.c
index 5850b5827..3551aaad8 100644
--- a/client/assistant.c
+++ b/client/assistant.c
@@ -261,7 +261,7 @@ static void assistant_set_bcode_cfg(const char *input, void *user_data)
 	if (!strcasecmp(input, "a") || !strcasecmp(input, "auto")) {
 		memset(cfg->qos.bcast.bcode, 0, BCODE_LEN);
 	} else {
-		if (strlen(input) > BCODE_LEN) {
+		if (strnlen(input, BCODE_LEN + 1) > BCODE_LEN) {
 			bt_shell_printf("Input string too long %s\n", input);
 			goto fail;
 		}
-- 
2.43.0


^ permalink raw reply related	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2025-09-09 20:50 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-09-05 13:49 [PATCH BlueZ] client/assistant: Use strnlen() instead of strlen() Roman Smirnov
2025-09-05 15:15 ` [BlueZ] " bluez.test.bot
2025-09-09 20:50 ` [PATCH BlueZ] " patchwork-bot+bluetooth

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).