projects / platform / core / api / media-controller.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f87293d) | patch
Bug fix. insecure strncmp 06/316806/1 accepted/tizen/unified/20241219.032735 accepted/tizen/unified/x/20241219.100942
authorJiyong <jiyong.min@samsung.com>
Wed, 18 Dec 2024 06:45:43 +0000 (15:45 +0900)
committerJiyong <jiyong.min@samsung.com>
Wed, 18 Dec 2024 06:45:43 +0000 (15:45 +0900)
commitdb1e071ad52b664c2acb3b80c28e05cd3033cd09
tree8c23cc3e308c137660e1c9019c87d2506623a58ftree | snapshot
parentf87293d892aa91db60a1ca4f7910388a13cfc311commit | diff
Bug fix. insecure strncmp

 - fix svace issue (LIB.INSECURE_STRNCMP)

The problem that such using checks only prefix of string because null-terminator is not checked.
It may be source of vulnarability when using for compariso passwords.
Correct pattern should use strlen(arg) + 1.

Change-Id: Ic9ac12468a6c81901e1c169097109e47a4c496fa
packaging/capi-media-controller.spec diff | blob | history
svc/media_controller_db_util.c diff | blob | history
Domain: Multimedia / Media Content;