| commit | ababbf781563ff1a866ee3847f9f55098eda9023 | [log] [tgz] |
|---|---|---|
| author | Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com> | Wed Nov 16 15:42:53 2016 -0800 |
| committer | Anas Nashif <nashif@linux.intel.com> | Fri Nov 18 23:04:32 2016 +0000 |
| tree | 776287b2cd99e2c13d6b51f0950f018724b13fc1 | |
| parent | c9aabcf2824ac55a57e6adb8584bf6951e86f1ac [diff] |
scrips/kconfig: use snprintf() vs sprintf() Coverity reported 150819 issue, which steams off Flex generated code from zconf.l in which sprintf() was use. Because of that, the conf_read_simple() @name parameter could be used to overrun zconf_open() @fullname by crafting SRCTREE and KCONFIG_ALLCONFIG environment variables. Change-Id: I2cff817dccafe0e06b35636bbb7be95e062410af Coverity-ID: 150819 Signed-off-by: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>