← Commit list

c4db9eb491

Daniel Stenberg
Daniel Stenberg
2025-10-17
SUCCESS Duration: 219s

Subject

rustls: limit snprintf proper in cr_keylog_log_cb()

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

lib/vtls/rustls.c+1 -1
@@ -518,7 +518,7 @@ cr_keylog_log_cb(struct rustls_str label,
(void)client_random_len;
DEBUGASSERT(client_random_len == CLIENT_RANDOM_SIZE);
/* Turning a "rustls_str" into a null delimited "c" string */
- curl_msnprintf(clabel, label.len + 1, "%.*s", (int)label.len, label.data);
+ curl_msnprintf(clabel, sizeof(clabel), "%.*s", (int)label.len, label.data);
Curl_tls_keylog_write(clabel, client_random, secret, secret_len);
}