Uploaded image for project: 'Traffic Server'
  1. Traffic Server
  2. TS-1010

strlcpy breaks WCCP Security

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.1.0
    • 3.1.1
    • Network

    Description

      The requirements for WCCP security key handling are precisely those of strncpy -

      • The buffer must be zero padded.
      • The terminating nul must not be copied if the key fills the buffer.
        Rather than doing something complex with strlcpy to satisfy these requirements it is much easier to simply use strncpy.

      Attachments

        Activity

          People

            amc Alan M. Carroll
            amc Alan M. Carroll
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: