Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removed usage of strcpy to enhance security of the client #1745

Merged
merged 3 commits into from
May 16, 2024

Conversation

pranavrth
Copy link
Member

No description provided.

@pranavrth pranavrth requested a review from a team as a code owner May 10, 2024 09:04
Copy link
Contributor

@milindl milindl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

@pranavrth pranavrth changed the title Fixed security vulnerability related to strcpy Removed usage of strcpy to enhance security of the client May 15, 2024

v2.4.1 is a maintenance release with the following fixes and enhancements:

- Removed usage of `strcpy` to enhance security of the client (#1745)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Given we're saying this, please remove also the usage in confluent_kafka.c so we don't have other occurrences

Copy link
Contributor

@emasab emasab left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Pranav! Approved

@pranavrth pranavrth merged commit f360bdf into master May 16, 2024
2 checks passed
@pranavrth pranavrth deleted the dev_use-strcpy_s branch May 16, 2024 13:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants