]> git.ipfire.org Git - thirdparty/openssl.git/commit
use_proxy(): Add missing terminating NUL byte
authorTomas Mraz <tomas@openssl.org>
Thu, 11 Sep 2025 16:43:55 +0000 (18:43 +0200)
committerTomas Mraz <tomas@openssl.org>
Mon, 29 Sep 2025 10:04:39 +0000 (12:04 +0200)
commit89e790ac431125a4849992858490bed6b225eadf
treed6831d7e770f61dd551deb07f6ecccbab5a380cf
parentce9179e711c176675fc2db4f32355b8a158a91a5
use_proxy(): Add missing terminating NUL byte

Fixes CVE-2025-9232

There is a missing terminating NUL byte after strncpy() call.
Issue and a proposed fix reported by Stanislav Fort (Aisle Research).

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 6bca15039e99d37ce3a3564eb862a3b1ff40e63d)
crypto/http/http_lib.c