]> git.ipfire.org Git - thirdparty/openwrt.git/commit
ixp4xx-microcode: use snprintf in IxNpeMicrocode.h 23172/head
authorOrbisAI Security <mediratta01.pally@gmail.com>
Fri, 15 May 2026 01:25:24 +0000 (06:55 +0530)
committerJonas Jelonek <jelonek.jonas@gmail.com>
Tue, 7 Jul 2026 07:10:02 +0000 (09:10 +0200)
commit37fad8b07e870e63f41331394f89fb3ae99106f1
treebfb8d2f66272c496911ce96e3975ffaeb67d65ed
parent4b2e7031b22e7887f9157162a849fbc43cbdb72b
ixp4xx-microcode: use snprintf in IxNpeMicrocode.h

Replace sprintf() calls with snprintf() to bound writes into the
fixed-size filename[] and slnk[] stack buffers. While the current
inputs are hash-pinned firmware images, snprintf provides defense
in depth against buffer overflows if the format string output ever
exceeds buffer capacity.

Signed-off-by: OrbisAI Security <mediratta01.pally@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23172
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
package/firmware/ixp4xx-microcode/src/IxNpeMicrocode.h