You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by sc...@apache.org on 2017/09/01 23:25:22 UTC
svn commit: r1807015 -
/santuario/xml-security-cpp/trunk/xsec/enc/XSECCryptoX509.cpp
Author: scantor
Date: Fri Sep 1 23:25:22 2017
New Revision: 1807015
URL: http://svn.apache.org/viewvc?rev=1807015&view=rev
Log:
SANTUARIO-447 - loadX509PEM() can read past unterminated buffer
Modified:
santuario/xml-security-cpp/trunk/xsec/enc/XSECCryptoX509.cpp
Modified: santuario/xml-security-cpp/trunk/xsec/enc/XSECCryptoX509.cpp
URL: http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/enc/XSECCryptoX509.cpp?rev=1807015&r1=1807014&r2=1807015&view=diff
==============================================================================
--- santuario/xml-security-cpp/trunk/xsec/enc/XSECCryptoX509.cpp (original)
+++ santuario/xml-security-cpp/trunk/xsec/enc/XSECCryptoX509.cpp Fri Sep 1 23:25:22 2017
@@ -46,7 +46,7 @@ void XSECCryptoX509::loadX509PEM(const c
b = b1;
}
- const char *p = strstr(buf, "-----BEGIN CERTIFICATE-----");
+ const char *p = strstr(b, "-----BEGIN CERTIFICATE-----");
if (p == NULL) {