pipewire/spa/plugins/alsa/acp
Wim Taymans f00c84ccad security: replace strcpy with memcpy in alsa_id_decode
Memory Safety: Low

alsa_id_decode() uses strcpy() to copy into a caller-provided buffer
without knowing its size. Although all current callers allocate the
buffer correctly (via alloca(strlen(src) + 1) or with a pre-validated
fixed buffer), the function signature does not encode this requirement.
Replace strcpy with memcpy using the known source length to make the
bounded copy explicit.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-27 16:15:10 +02:00
..
acp.c
acp.h
alsa-mixer.c security: replace strcpy with memcpy in alsa_id_decode 2026-04-27 16:15:10 +02:00
alsa-mixer.h
alsa-ucm.c
alsa-ucm.h
alsa-util.c
alsa-util.h
array.h
card.h
channelmap.h
compat.c
compat.h spa/plugins/alsa/acp/compat.h: p is already const do not recast 2026-03-17 03:17:15 +11:00
conf-parser.c
conf-parser.h
device-port.h
dynarray.h
hashmap.h
idxset.h
llist.h
meson.build
proplist.h
volume.h