Re: [PATCH] tools/power/cpupower: Replace strcpy/strcat with snprintf in powercap.c

[Shuah Khan]

On 1/31/26 09:42, Sumeet Pawnikar wrote:
> Replace all unsafe strcpy() and strcat() calls with snprintf() in
> powercap.c to prevent potential buffer overflow vulnerabilities.
> The snprintf() function performs automatic bounds checking to ensure
> the destination buffer is not overflowed.

Why snprintf() - why not use strncpy() and strncat()

> No functional change.

Why isn't this a functional change? You are changing the code to use
a different system call? How did you test this patch?

thanks,
-- Shuah