besser82 / libxcrypt

Extended crypt library for descrypt, md5crypt, bcrypt, and others
GNU Lesser General Public License v2.1
189 stars 52 forks source link

hardening: negative snprintf return values #182

Open ep69 opened 8 months ago

ep69 commented 8 months ago

snprintf returns negative values in case of errors, as found out by SAST (Static Application Security Testing)

ep69 commented 5 months ago

@fweimer-rh @besser82 I am sensing reluctance to this change. Would it be easier for everybody to just close it and never look back?

ep69 commented 4 months ago

@fweimer-rh could you please have another look if all your concerns are fixed?