fortify-headers/include/string.h, branch 3.0.2

Fix strncat/wcsncat

2026-04-30T22:44:53Z

Previously, no checks were done when __n <= __b, but strncat _appends_ after existing content, making this a overly broad check check. For example, with an 8-byte buffer containing "12345\0", strncat(buf, "ABCD", 4) would have the check skipped, but the result "12345ABCD\0" is 10 bytes, resulting in an overflow. This commit fixes this oversight, and adds a bunch of tests.

Fix a bug in stpncpy

2026-04-30T15:37:02Z

The manpage says that stpncpy will "copy non-null bytes from the string pointed to by src into the array pointed to by dst.", it doesn't add a terminal NULL byte, so we shouldn't check for it.

Change __warning_if into __fortify_warning_if to fix potential conflicts

2025-12-30T10:34:48Z

Change access into fortify_access to fix potential conflicts

2025-12-30T10:34:48Z

Add __diagnose_if annotations

2025-11-14T15:56:09Z

Add `access` annotations

2025-11-14T12:55:31Z

add initial clang support

2025-10-31T21:16:21Z

Co-Authored-By: jvoisin

avoid extension with clang

2025-10-31T21:16:21Z

It seems useless and triggers 'error: expected external declaration'

Make use of __builtin_dynamic_object_size

2025-10-31T21:16:21Z

GCC and Clang provide __builtin_dynamic_object_size (see documentation: https://gcc.gnu.org/onlinedocs/gcc/Object-Size-Checking.html), so we should make use of it when its available.

Make use of builtins whenever possible

2019-02-25T13:17:08Z

fortify-headers/include/string.h, branch 3.0.2

Fix strncat/wcsncat

Fix a bug in stpncpy

Change __warning_if into __fortify_warning_if to fix potential conflicts

Change __access into __fortify_access to fix potential conflicts

Add __diagnose_if annotations

Add `access` annotations

add initial clang support

avoid __extension__ with clang

Make use of __builtin_dynamic_object_size

Make use of builtins whenever possible

Change access into fortify_access to fix potential conflicts

avoid extension with clang