diff options
| author | Steffan Karger <steffan@karger.me> | 2015-03-05 22:58:36 +0100 |
|---|---|---|
| committer | Gert Doering <gert@greenie.muc.de> | 2015-03-06 19:34:33 +0100 |
| commit | 63559e142eb71a5e38dfc55d429f35f6e1af0b7c (patch) | |
| tree | 7b0d49de88454e1bca3cba4b93173224d4bf2477 /src | |
| parent | 48e5e425b7568d8fbd2e32517b7c358dbb6d4c5f (diff) | |
| download | openvpn-63559e142eb71a5e38dfc55d429f35f6e1af0b7c.tar.gz openvpn-63559e142eb71a5e38dfc55d429f35f6e1af0b7c.tar.xz openvpn-63559e142eb71a5e38dfc55d429f35f6e1af0b7c.zip | |
polarssl: make sure to always null-terminate the cn
Just a precaution, this could never fail in the current code since in the
one place this function is called, the cn is already zero-initialized.
Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1425592716-14243-2-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9511
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src')
| -rw-r--r-- | src/openvpn/ssl_verify_polarssl.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/openvpn/ssl_verify_polarssl.c b/src/openvpn/ssl_verify_polarssl.c index e21301d..2edf21d 100644 --- a/src/openvpn/ssl_verify_polarssl.c +++ b/src/openvpn/ssl_verify_polarssl.c @@ -115,7 +115,10 @@ backend_x509_get_username (char *cn, int cn_len, /* Found, extract CN */ if (cn_len > name->val.len) - memcpy( cn, name->val.p, name->val.len ); + { + memcpy( cn, name->val.p, name->val.len ); + cn[name->val.len] = '\0'; + } else { memcpy( cn, name->val.p, cn_len); |