jeanthom opened a new issue, #3109:
URL: https://github.com/apache/nuttx-apps/issues/3109

   ### Is your feature request related to a problem? Please describe.
   
   The system/settings module/library uses unsafe C string manipulation 
functions (eg. `strcmp()` or `strlen()`) on potentially user-accessible data, 
creating a security hazard.
   
   ### Describe the solution you'd like
   
   The maximum key/value lengths are known at compile time (Kconfig 
parameters), meaning we could use safer `strnlen()` and `strncmp()` functions.
   
   ### Describe alternatives you've considered
   
   _No response_
   
   ### Verification
   
   - [x] I have verified before submitting the report.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@nuttx.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to