chore(security): avoid use of strcpy

google · Mar 4, 2025 · 9585de0 · 9585de0
1 parent 4f007d9
commit 9585de0
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/symbolize.cc b/src/symbolize.cc
@@ -832,8 +832,10 @@ static ATTRIBUTE_NOINLINE bool SymbolizeAndDemangle(
   Dl_info info;
   if (dladdr(pc, &info)) {
     if (info.dli_sname) {
-      if (strlen(info.dli_sname) < out_size) {
-        strcpy(out, info.dli_sname);
+      int name_length = strlen(info.dli_sname);
+      if (name_length < out_size) {
+        memcpy(out, info.dli_sname, name_length);
+        out[name_length] = '\0';
         // Symbolization succeeded.  Now we try to demangle the symbol.
         DemangleInplace(out, out_size);
         return true;