On Fri, Jan 09, 2026 at 04:25:14PM +0000, Yicong Hui wrote: > strcpy() is deprecated as it does not do any bounds checking (as > specified in Documentation/process/deprecated.rst). > > There is a risk of buffer overflow in the case that the value for > THIS_MODULE->version exceeds the 64 characters. This is unlikely, but > replacing the deprecated function will pre-emptively remove this risk > entirely. > > Replace both instances of strcpy() with the safer strscpy() function.
This looks correct to me -- dest and src are both fixed-size, so strscpy happily checks everything at compile time. :) Reviewed-by: Kees Cook <[email protected]> -Kees -- Kees Cook
