Skip to content

process58: bound sscanf perm field in get_exec_shield_status#2346

Merged
jan-cerny merged 1 commit intoOpenSCAP:mainfrom
Mab879:cursor/process58-sscanf-bounds
May 7, 2026
Merged

process58: bound sscanf perm field in get_exec_shield_status#2346
jan-cerny merged 1 commit intoOpenSCAP:mainfrom
Mab879:cursor/process58-sscanf-bounds

Conversation

@Mab879
Copy link
Copy Markdown
Member

@Mab879 Mab879 commented May 4, 2026

Use %7s and larger buffer; read maps lines with fgets(buf, sizeof(buf)).

Fixes https://github.com/OpenSCAP/openscap/security/code-scanning/1589

Use %7s and larger buffer; read maps lines with fgets(buf, sizeof(buf)).

Co-authored-by: Cursor <cursoragent@cursor.com>
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented May 4, 2026

@jan-cerny jan-cerny self-assigned this May 7, 2026
Copy link
Copy Markdown
Member

@jan-cerny jan-cerny left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's a good fix.

The fail of build on Fedora isn't caused by contents of this PR and will be fixed by #2347

@jan-cerny jan-cerny merged commit 1e7263a into OpenSCAP:main May 7, 2026
20 of 21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants