OpenDMARC icon indicating copy to clipboard operation
OpenDMARC copied to clipboard

String copy bounds checking failure in opendmarc.c.

Open bicknell opened this issue 4 years ago • 0 comments

An invocation of strncpy uses the size of the source string as the bounds limit for the destination string. This can lead to a buffer overflow.

Pull request https://github.com/trusteddomainproject/OpenDMARC/pull/139 converts this to a safer strlcpy that is bounds limited on the destination string size.

bicknell avatar Mar 19 '21 19:03 bicknell