Re: possible crash in BIO_printf()

1999-11-28 Thread Kris Kennaway
On Sat, 27 Nov 1999, Goetz Babin-Ebell wrote: We should fix this by using vsnprintf() instead of vsprintf(). (and snprintf instead of sprintf) But on some systems there is no (v)snprintf. There we must use (v)sprintf(). (And hope this will be fixed soon...) OpenSSL could (and probably

possible crash in BIO_printf()

1999-11-27 Thread Goetz Babin-Ebell
Hallo, I have a problem with BIO_printf: It is possible to crash a program using BIO_printf passing data resulting in a very long ( 1024*2 char) string. We should fix this by using vsnprintf() instead of vsprintf(). (and snprintf instead of sprintf) But on some systems there is no