From 6bca15039e99d37ce3a3564eb862a3b1ff40e63d Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Thu, 11 Sep 2025 18:43:55 +0200 Subject: [PATCH] use_proxy(): Add missing terminating NUL byte Fixes CVE-2025-9232 There is a missing terminating NUL byte after strncpy() call. Issue and a proposed fix reported by Stanislav Fort (Aisle Research). Reviewed-by: Neil Horman Reviewed-by: Matt Caswell --- crypto/http/http_lib.c | 1 + 1 file changed, 1 insertion(+) diff --git a/crypto/http/http_lib.c b/crypto/http/http_lib.c index fcf8a69e07a..022b8c194cb 100644 --- a/crypto/http/http_lib.c +++ b/crypto/http/http_lib.c @@ -263,6 +263,7 @@ static int use_proxy(const char *no_proxy, const char *server) /* strip leading '[' and trailing ']' from escaped IPv6 address */ sl -= 2; strncpy(host, server + 1, sl); + host[sl] = '\0'; server = host; } -- 2.47.3