On Sat, 04 Jan 2025 00:21:15 +0100, Heinrich Schuchardt wrote: > Using strstr() instead of strnstr() creates a security concern. > > * Implement missing library function strnstr() and add unit tests. > * Use it for lwIP. > > Heinrich Schuchardt (3): > lib: implement strnstr() > test: unit tests for strstr() and strnstr() > net: use strnstr() for lwip_strnstr() > > [...]
Applied to u-boot/master, thanks! -- Tom
