Replace vulnerable function to thread safety

* rand()     -> rand_r()
* strcpy()   -> strncpy()
* sprintf()  -> snprintf()
* strerror() -> strerror_r()

Change-Id: Ib6d91ac0f5c75a54b3be5546ba281c53b1844828
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>

1 files changed, 2 insertions, 1 deletions

diff --git a/src/openssl/app.c b/src/openssl/app.c
index 373e03a8..8e519883 100644
--- a/src/openssl/app.c
+++ b/src/openssl/app.c
@@ -1631,7 +1631,8 @@ xmlSecOpenSSLDummyPasswordCallback(char *buf, int bufsize,
         return(-1);
     }
 
-    strcpy(buf, password);
+    strncpy(buf, password, strlen(password) + 1);
+
     return (strlen(buf));
 }