From: Jason Ish <ish@unx.ca>
Date: Tue, 23 Aug 2016 16:53:49 +0000 (-0600)
Subject: app-layer-tls: accomodate trailing \0 in hash output
X-Git-Tag: suricata-3.1.2~40
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F2198%2Fhead;p=thirdparty%2Fsuricata.git

app-layer-tls: accomodate trailing \0 in hash output
---

diff --git a/src/app-layer-tls-handshake.c b/src/app-layer-tls-handshake.c
index c95fd4373a..bc99097b20 100644
--- a/src/app-layer-tls-handshake.c
+++ b/src/app-layer-tls-handshake.c
@@ -181,7 +181,7 @@ int DecodeTLSHandshakeServerCertificate(SSLState *ssl_state, uint8_t *input,
             if (i == 0 && ssl_state->server_connp.cert0_fingerprint == NULL) {
                 int msg_len = cur_cert_length;
                 int hash_len = 20;
-                int out_len = 60;
+                int out_len = hash_len * 3 + 1;
                 char out[out_len];
                 unsigned char *hash;
                 hash = ComputeSHA1((unsigned char *) input, (int) msg_len);