Fix CVE-2012-3547. Found by Timo Warns.

diff --git a/src/main/tls.c b/src/main/tls.c
index beb48216b7f44f32674af4981ca18bd41a1147ef..ab061bc9a729c6fba6a8f4439d0acb85f7a74cc5 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1380,7 +1380,7 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
        buf[0] = '\0';
        asn_time = X509_get_notAfter(client_cert);
        if (identity && (lookup <= 1) && asn_time &&
-           (asn_time->length < MAX_STRING_LEN)) {
+           (asn_time->length < sizeof(buf))) {
                memcpy(buf, (char*) asn_time->data, asn_time->length);
                buf[asn_time->length] = '\0';
                pairadd(certs,