mutt stable branch with some hacks
Make sure that the output of X509_NAME_oneline is null-terminated.
+3
-2
+3
-2
mutt_ssl.c
+3
-2
mutt_ssl.c
···
969
969
#ifdef DEBUG
970
970
char buf[STRING];
971
971
972
+
buf[STRING - 1] = '\0';
972
973
dprint (1, (debugfile, "ssl_check_certificate: checking cert %s\n",
973
974
X509_NAME_oneline (X509_get_subject_name (data->cert),
974
-
buf, sizeof (buf))));
975
+
buf, sizeof (buf) - 1)));
975
976
#endif
976
977
977
978
if ((preauthrc = ssl_check_preauth (data->cert, conn->account.host)) > 0)
···
991
992
992
993
dprint (1, (debugfile, "ssl_check_certificate: checking cert chain entry %s\n",
993
994
X509_NAME_oneline (X509_get_subject_name (cert),
994
-
buf, sizeof (buf))));
995
+
buf, sizeof (buf) - 1)));
995
996
996
997
/* if the certificate validates or is manually accepted, then add it to
997
998
* the trusted set and recheck the peer certificate */