search

Nitrokey / libnitrokey

Communicate with Nitrokey devices in a clean and easy manner
https://nitrokey.com/
GNU Lesser General Public License v3.0
65 stars 34 forks source link

Use memcpy instead of strcpy #180

Open szszszsz opened 4 years ago

szszszsz commented 4 years ago

While sending temporary password, the strcpy is used to copy binary buffer, which might result in setting the value shorter than allowed.

https://github.com/Nitrokey/libnitrokey/blob/2e38681cd0b34e1ce36a6417445f3a7ca75f246c/NitrokeyManager.cc#L680