CVE-2016-2180

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



El d?a Thursday, September 15, 2016 a las 09:00:07PM -0700, sivagopiraju escribi?:

> -   int len = OBJ_obj2txt(obj_txt, sizeof(obj_txt), obj, 0);
> -    BIO_write(bio, obj_txt, len);
> -    BIO_write(bio, "\n", 1);
> +    OBJ_obj2txt(obj_txt, sizeof(obj_txt), obj, 0);
> +    BIO_printf(bio, "%s\n", obj_txt);
> 
> Here, used BIO_printf instead of BIO_write, is it solve the issue?
> 
> Can you please elaborate it, did't understand the solution.

The man page for OBJ_obj2txt() says what the function is doing and what
the parms are used for or must be, but does not specify what its return
value is, only that it is 'int'. Maybe it does not return the length of
the resulting string.

	matthias
-- 
Matthias Apitz, ? guru at unixarea.de, ? http://www.unixarea.de/  ? +49-176-38902045
"Ohne die Mauer h?tte es Krieg gegeben" Fritz Streletz u.a.
"Sin el Muro hubiese habido guerra."


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux