]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a79c4ce) | patch
use_proxy(): Add missing terminating NUL byte
authorTomas Mraz <tomas@openssl.org>
Thu, 11 Sep 2025 16:43:55 +0000 (18:43 +0200)
committerTomas Mraz <tomas@openssl.org>
Mon, 29 Sep 2025 10:04:46 +0000 (12:04 +0200)
commit654dc11d23468a74fc8ea4672b702dd3feb7be4b
tree92dcbd264335a74c5b770fe11fdc3127170a3493tree | snapshot
parenta79c4ce559c6a3a8fd4109e9f33c1185d5bf2defcommit | diff
use_proxy(): Add missing terminating NUL byte

Fixes CVE-2025-9232

There is a missing terminating NUL byte after strncpy() call.
Issue and a proposed fix reported by Stanislav Fort (Aisle Research).

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 6bca15039e99d37ce3a3564eb862a3b1ff40e63d)
crypto/http/http_lib.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git