mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-04-30 06:46:49 -04:00
4f9e59b87d
Memory Safety: Medium The broadcast_code field is a 16-byte array that can be filled with exactly 16 bytes of data via memcpy without null termination when the input string length equals BROADCAST_CODE_LEN. The field is then logged with %s format, which reads past the buffer boundary into adjacent struct fields, potentially disclosing sensitive data. Fix by changing the boundary check from > to >= to ensure room for the null terminator, and copy the terminator along with the data. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| aec | ||
| alsa | ||
| audioconvert | ||
| audiomixer | ||
| audiotestsrc | ||
| avb | ||
| bluez5 | ||
| control | ||
| ffmpeg | ||
| filter-graph | ||
| jack | ||
| libcamera | ||
| support | ||
| test | ||
| v4l2 | ||
| videoconvert | ||
| videotestsrc | ||
| volume | ||
| vulkan | ||
| meson.build | ||