]> git.ipfire.org Git - thirdparty/linux.git/commit
apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
authorThorsten Blum <thorsten.blum@linux.dev>
Sat, 22 Nov 2025 11:55:51 +0000 (12:55 +0100)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 18 Jan 2026 14:52:58 +0000 (06:52 -0800)
commitb31d3f7385fbb49681d44e7104cfa033cba4b1e8
tree37c4cf617077bd3c4416d8342f7a523ced160bda
parent7db8c3c738118b6d9e5c3eb54e352fdae1bb0faf
apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init

strcpy() is deprecated and sprintf() does not perform bounds checking
either. Although an overflow is unlikely, it's better to proactively
avoid it by using the safer strscpy() and scnprintf(), respectively.

Additionally, unify memory allocation for 'hname' to simplify and
improve aa_policy_init().

Closes: https://github.com/KSPP/linux/issues/88
Reviewed-by: Serge Hallyn <serge@hallyn.com>
Signed-off-by: Thorsten Blum <thorsten.blum@linux.dev>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/lib.c