]> git.ipfire.org Git - thirdparty/openssl.git/commit
use_proxy(): Add missing terminating NUL byte
authorTomas Mraz <tomas@openssl.org>
Thu, 11 Sep 2025 16:43:55 +0000 (18:43 +0200)
committerTomas Mraz <tomas@openssl.org>
Mon, 29 Sep 2025 10:03:56 +0000 (12:03 +0200)
commit6bca15039e99d37ce3a3564eb862a3b1ff40e63d
treea6f75a74e0c46ebde84bac219f066a65942d963a
parent56c89cd2de75055ecf4b705824fb354631d5d810
use_proxy(): Add missing terminating NUL byte

Fixes CVE-2025-9232

There is a missing terminating NUL byte after strncpy() call.
Issue and a proposed fix reported by Stanislav Fort (Aisle Research).

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/http/http_lib.c