From: Hugo Landau <hlandau@openssl.org>
Date: Mon, 4 Mar 2024 22:55:51 +0000 (+0000)
Subject: QUIC QLOG: Fix use of sprintf
X-Git-Tag: openssl-3.3.0-alpha1~48
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6a11cd50d52694353d7bb11421490939d92df1b6;p=thirdparty%2Fopenssl.git

QUIC QLOG: Fix use of sprintf

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23744)
---

diff --git a/ssl/quic/qlog.c b/ssl/quic/qlog.c
index 2cfa9af9d30..c14d53eece0 100644
--- a/ssl/quic/qlog.c
+++ b/ssl/quic/qlog.c
@@ -130,7 +130,7 @@ QLOG *ossl_qlog_new_from_env(const QLOG_TRACE_INFO *info)
         filename[l++] = qlogdir_sep;
 
     for (i = 0; i < info->odcid.id_len; ++i)
-        l += sprintf(filename + l, "%02x", info->odcid.id[i]);
+        l += BIO_snprintf(filename + l, strl - l, "%02x", info->odcid.id[i]);
 
     l += BIO_snprintf(filename + l, strl - l, "_%s.sqlog",
                       info->is_server ? "server" : "client");