Frantisek Sumsal d8f2a2fb92 string-util: check for overflow in strrep() ...

This simply mirrors the same overflow check we already have in
strrepa(), in case someone passed us a sufficiently long string.

strrep() is currently used only in tests, so this is just hardening.

(cherry picked from commit b22daa97e1)

2026-05-22 13:32:04 +01:00

..

ac-power

…

analyze

tree-wide: suppress misc-use-internal-linkage warnings

2026-03-05 20:23:24 +01:00

ask-password

ask-password: install polkit policy

2026-02-03 08:16:25 +09:00

backlight

backlight: also change clamp percentage on ID_BACKLIGHT_CLAMP/ID_LEDS_CLAMP=yes

2026-02-16 21:24:55 +09:00

basic

string-util: check for overflow in strrep()

2026-05-22 13:32:04 +01:00

battery-check

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

binfmt

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

bless-boot

various: use asprintf_safe in more places

2026-03-06 17:46:59 +01:00

boot

boot: fix loop bound and OOB in devicetree_get_compatible()

2026-04-13 12:40:17 +01:00

bootctl

copy: add new flags that cause a seek to beginning of files before copying

2026-04-13 12:22:51 +01:00

busctl

busctl: handle --limit-messages option under the wait verb

2026-01-19 22:41:33 +09:00

cgls

cgroup-show: drop unnecessary call of cg_mangle_path()

2025-11-17 21:31:51 +09:00

cgtop

cgtop: fix confusion in --help

2026-02-11 11:46:12 +01:00

core

core: check selinux access on each unit when listing

2026-04-14 17:32:02 +01:00

coredump

journal: move the {DATA,ENTRY}_SIZE constants to sd-journal

2026-04-13 12:40:17 +01:00

coverage

…

creds

meson: Still build libshared even if libmount is disabled

2025-11-24 13:09:41 +01:00

cryptenroll

meson: use libfido2_cflags dependency

2026-03-12 16:02:28 +00:00

cryptsetup

meson: use libfido2_cflags dependency

2026-03-12 16:02:28 +00:00

debug-generator

debug-generator: use unsigned bit shift for breakpoint flags

2026-04-13 12:40:16 +01:00

delta

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

detect-virt

…

dissect

loop-util: use auto-detect open mode for loop device setup

2026-04-13 12:40:16 +01:00

environment-d-generator

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

escape

tree-wide: flatten nested error checks

2025-12-10 18:59:44 +09:00

factory-reset

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

firstboot

firstboot: harden credential handling a bit

2026-03-23 14:17:34 +01:00

fsck

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

fstab-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

fundamental

tree-wide: use DIGITS and friends

2026-03-03 22:18:26 +01:00

fuzz

fuzz: fix typo

2026-03-11 03:23:53 +09:00

getty-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

gpt-auto-generator

gpt-auto-generator: enable nvpcr logic by default

2026-02-17 22:00:14 +01:00

growfs

various: fix typos

2026-04-13 12:22:52 +01:00

hibernate-resume

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

home

homectl: apply all --member-of= groups from a comma-separated list

2026-04-13 12:40:15 +01:00

hostname

tree-wide: use ALPHANUMERICAL where appropriate

2026-03-04 07:36:10 +09:00

hwdb

…

id128

…

import

importd: harden curl file protocol handling

2026-04-14 17:32:02 +01:00

include

mips: Fix conditional inclusion of <asm/sgidefs.h>

2026-03-23 14:17:34 +01:00

integritysetup

tree-wide: use full paths to tools defined in config.h

2026-01-12 22:17:36 +01:00

journal

journal: move the {DATA,ENTRY}_SIZE constants to sd-journal

2026-04-13 12:40:17 +01:00

journal-remote

journal-upload: also disable VERIFYHOST when --trust=all is used

2026-04-14 17:32:02 +01:00

kernel-install

kernel-install(uki): filter comments from cmdline

2026-04-13 12:40:16 +01:00

keyutil

keyutil: Add extract-certificate

2025-12-18 13:57:32 +01:00

libc

Bump required minimum version of glibc to 2.34

2026-01-28 10:56:53 +09:00

libsystemd

sd-varlink: Don't log successful sentinel error dispatch as a failure

2026-05-22 13:28:04 +01:00

libsystemd-network

dhcp: fix user class and vendor specific option assignment

2026-04-13 12:47:46 +01:00

libudev

libudev: Fix declaration argument names

2026-01-02 09:39:31 +01:00

locale

clang-tidy: Enable more warnings (#39910)

2026-01-03 06:00:30 +09:00

login

logind: reject wall messages containing control characters

2026-04-14 17:32:02 +01:00

machine

machined: gate metadata querying behind inspect-machines/images action

2026-05-22 13:32:03 +01:00

machine-id-setup

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

measure

measure-tool: always sign with SHA256

2026-03-11 18:40:57 +00:00

modules-load

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

mount

mount: honor --timeout-idle-sec=SEC option (#41010)

2026-03-10 04:31:53 +09:00

mountfsd

loop-util: use auto-detect open mode for loop device setup

2026-04-13 12:40:16 +01:00

mstack

mstack: parse --mkdir option

2026-02-20 16:56:16 +01:00

mute-console

mute-console: io.systemd.MuteConsole requires 'more'

2026-02-16 09:44:54 +01:00

network

networkd-wwan: drop unreachable unknown-bearer fallback path

2026-04-13 12:40:17 +01:00

notify

notify: add one more assert

2026-04-13 12:22:43 +01:00

nspawn

nspawn: move boot_id and kmsg backing file creation to outer child

2026-04-13 12:40:16 +01:00

nsresourced

nsresourced: fix BPF loading when using kernel compiled with Clang

2026-03-23 14:17:34 +01:00

nss-myhostname

nss-myhostname: add more INC_SAFE for buffer index accumulation

2026-04-13 12:40:17 +01:00

nss-mymachines

…

nss-resolve

nss-resolve: add env var to specify resolved ifindex

2025-12-18 10:53:27 +01:00

nss-systemd

nss-systemd: fix off-by-one in nss_pack_group_record_shadow()

2026-04-13 12:40:17 +01:00

oom

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

path

path: simplify run()

2026-02-11 11:47:18 +01:00

pcrextend

pcrlock: add an extra assert()

2026-03-10 12:03:17 +01:00

pcrlock

pcrlock: don't fail if firmware measurements aren't available

2026-04-13 12:40:16 +01:00

portable

portablectl: fix swapped arguments for setns()

2026-04-13 12:40:17 +01:00

pstore

pstore: fix typo

2026-01-06 08:45:22 +09:00

ptyfwd

tree-wide: Remove unnecessary SIGCHLD blocking

2025-12-20 15:50:47 +01:00

quotacheck

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

random-seed

…

remount-fs

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

repart

repart: Do not refer to SizeMinBytes= as SizeMin=

2026-04-13 12:40:17 +01:00

reply-password

…

report

tree-wide: make private hash ops static

2026-03-04 14:32:15 +01:00

resolve

resolved: check for reset-statistics polkit action via D-Bus too

2026-05-22 13:27:54 +01:00

rfkill

…

rpm

systemctl: rename enqueue-marked-jobs to enqueue-marked

2026-03-03 15:26:45 +01:00

run

parse-argument: make parse_tristate_argument() do something useful

2026-02-20 21:20:45 +01:00

run-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

sbsign

various: fix compilation with openssl-4.0.0-beta1

2026-05-22 13:28:04 +01:00

shared

various: fix compilation with openssl-4.0.0-beta1

2026-05-22 13:28:04 +01:00

shutdown

shutdown: check WATCHDOG_PID= if it is set

2026-04-13 12:40:17 +01:00

sleep

sleep: allow HibernateDelaySec and low-battery hibernation to work together

2026-02-05 10:28:47 +01:00

socket-activate

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

socket-proxy

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

ssh-generator

ssh-proxy: fix use-after-free of borrowed varlink reply reference

2026-04-13 12:40:17 +01:00

stdio-bridge

stdio-bridge: remove unreachable return

2025-11-13 21:28:17 +01:00

storagetm

Fix bug in DM iteration and standardise how to iterate through DM layers (#40426)

2026-01-30 15:36:03 +09:00

sulogin-shell

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

sysctl

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

sysext

tree-wide: drop redundant check for SD_VARLINK_METHOD_MORE flag

2026-02-16 09:44:54 +01:00

system-update-generator

…

systemctl

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

systemd

tpm2-util: check udev db to determine if NvPCRs are going to work

2026-03-04 08:28:46 +01:00

sysupdate

sysupdated: don't crash when an mstack machine image is found

2026-05-22 13:28:04 +01:00

sysusers

sysusers: disallow --cat-config with --inline

2026-03-23 14:17:34 +01:00

test

string-util: check for overflow in strrep()

2026-05-22 13:32:04 +01:00

timedate

various: make bus objects static

2026-03-04 14:32:16 +01:00

timesync

timesync: actually disables built-in fallback NTP servers when an empty string is specified

2026-02-16 09:53:03 +09:00

tmpfiles

tmpfiles: do not mandate STATX_ATIME and STATX_MTIME

2026-04-13 12:40:17 +01:00

tpm2-setup

tpm2-setup: don't fail service on two more types of failures

2026-03-04 08:28:46 +01:00

tty-ask-password-agent

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

udev

udev/scsi-id: check for invalid header from kernel buffer

2026-04-13 12:40:17 +01:00

ukify

ukify: default --hwids to /usr/lib/systemd/boot/hwids/<EFI_ARCH>/

2026-02-25 13:51:31 +00:00

update-done

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

update-utmp

…

user-sessions

…

userdb

userdbd: avoid sending gshadow hash to unprivileged callers via varlink

2026-02-25 02:52:37 +01:00

validatefs

mountpoint-util: make is_mount_point_at() take usual dir_fd + path style arguments

2026-01-13 10:21:05 +09:00

varlinkctl

varlinkctl: add pluggable protocol support to sd-varlink

2026-02-13 19:07:20 +01:00

vconsole

vconsole-setup: handle gracefully if setfont/loadkeys are not available

2026-03-23 14:17:34 +01:00

veritysetup

veritysetup: optionally measure Verity once we activated it

2026-02-17 22:00:14 +01:00

version

meson: add tools/meson.build

2025-12-01 16:18:11 +01:00

vmspawn

vmspawn: Drop --sandbox=chroot from virtiofsd command line

2026-04-13 12:22:52 +01:00

volatile-root

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

vpick

vpick: Make suffix a single string again instead of a strv

2026-02-18 23:14:11 +01:00

xdg-autostart-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00