diff options
author | Daniel Gustafsson <daniel@yesql.se> | 2018-10-07 22:36:25 +0200 |
---|---|---|
committer | Daniel Gustafsson <daniel@yesql.se> | 2018-10-07 22:36:25 +0200 |
commit | b55e85d4ec53eead7e99efa34f78a981bee32994 (patch) | |
tree | 712708ebc6c2c6defa68f8ed9befc775a7555c99 /lib/curl_sec.h | |
parent | c1af9b7690fa3d4c77b7abb08632e69748cb03b4 (diff) |
gskit: make sure to terminate version string
In case a very small buffer was passed to the version function, it could
result in the buffer not being NULL-terminated since strncpy() doesn't
guarantee a terminator on an overflowed buffer. Rather than adding code
to terminate (and handle zero-sized buffers), move to using snprintf()
instead like all the other vtls backends.
Closes #3105
Reviewed-by: Daniel Stenberg <daniel@haxx.se>
Reviewed-by: Viktor Szakats <commit@vszakats.net>
Diffstat (limited to 'lib/curl_sec.h')
0 files changed, 0 insertions, 0 deletions