Re: [PATCH] drivers/input: Remove all strcpy() uses in favor of strscpy()
From: Joe Perches
Date: Mon Aug 02 2021 - 14:57:50 EST
On Mon, 2021-08-02 at 09:13 -0700, Kees Cook wrote:
> I'm wondering, instead, if we could convert strcpy() into this instead
> of adding another API? I.e. convert all the places that warn (if this
> were strcpy), and then land the conversion.
Perhaps not as strcpy is a builtin.
It might be easier as a cocci script. Something like:
@@
char [] dest;
constant char [] src;
@@
* strcpy(dest, src)
There are some additional test that needs to be added so that
only length(src) > length(dest) is reported.