mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-05-02 06:46:36 -04:00
Memory Safety: Medium The spa_debugc_mem() function used unbounded sprintf() calls to format hex dump output into a fixed 512-byte stack buffer. While the current line-by-line output (16 bytes per line) fits within the buffer, sprintf provides no overflow protection if the format changes or assumptions are violated. Replace with snprintf() using sizeof(buffer) and remaining space tracking to guarantee the buffer cannot be overflowed. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| examples | ||
| include | ||
| include-private/spa-private | ||
| lib | ||
| plugins | ||
| tests | ||
| tools | ||
| meson.build | ||