orbisai0security b6007e1f9c fix: add buffer-length check in tty_ptmx.c ...

The sprintf() call at line 293 in the kernel's PTY subsystem writes a formatted string combining root_path and dev_rel_path into the device_name buffer without any bounds checking

2026-06-16 15:43:44 +08:00

..

test_invariant_tty_ptmx.c

fix: add buffer-length check in tty_ptmx.c

2026-06-16 15:43:44 +08:00