Replace strcpy to strncpy due to security reason.

Change-Id: Ib27a3aac775b40e95fb5344062a6600ae78737b7
(cherry picked from commit 2e965bbe41a43690cf9533cf12e05422652d05a1)

diff --git a/src/tef_libteec.c b/src/tef_libteec.c
index 5796d0d..a5f1914 100644 (file)
--- a/src/tef_libteec.c
+++ b/src/tef_libteec.c
@@ -287,11 +287,13 @@ static void configParam(const char *p)
        }
        if (strncmp(p, "lib=", 4) == 0) {
                const char *libname = p + 4;
-               if (strlen(libname) > sizeof(config.libname) - 1) {
+               size_t libnamesize = strlen(libname);
+               if (libnamesize > sizeof(config.libname) - 1) {
                        fprintf(stderr, "tef-libteec: name to long '%s'\n", libname);
                        return;
                }
-               strcpy(config.libname, libname);
+               strncpy(config.libname, libname, libnamesize);
+               config.libname[libnamesize] = '\0';
        }
 }