From a487280e095e376a40354e69c01593153d61f126 Mon Sep 17 00:00:00 2001 From: Josiah Vehrs Date: Wed, 10 Jun 2026 18:17:53 -0700 Subject: [PATCH] util: fix possible return of unsanitized input in str_sanitize Fixes: 71a2c5cae2a8 ("util: sanitize control characters in str_sanitize()") Part-of: --- src/util-strings.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/util-strings.h b/src/util-strings.h index 6186c167..a6ff440b 100644 --- a/src/util-strings.h +++ b/src/util-strings.h @@ -572,7 +572,7 @@ str_sanitize(const char *str) } } if (!needs_sanitization) - return strdup(str); + return strndup(str, slen); char *sanitized = zalloc(2 * slen + 1); const char *src = str;