#3870: openssl 1.1
----------------------+----------------------
  Reporter:  tamo     |      Owner:  mutt-dev
      Type:  task     |     Status:  closed
  Priority:  trivial  |  Milestone:
 Component:  build    |    Version:  1.7.0
Resolution:  fixed    |   Keywords:  ssl
----------------------+----------------------

Comment (by vinc17):

 The {{{X509_NAME_oneline}}} documentation is ambiguous: it does not say
 that its output is null-terminated if the number of characters reaches the
 buffer size, and according to https://langui.sh/2016/01/29/x509-name-
 oneline/ it isn't in such a case. I've fixed the code in
 r6872:db13010a2e8d.

 To avoid the truncation, it is also possible to ask the library to do the
 allocation by providing a null pointer, but it is not clear how to free
 the memory ({{{free}}} or {{{OPENSSL_free}}}?), and anyway, a truncation
 is acceptable in a debugging message. Ditto for the fact that the use of
 {{{X509_NAME_oneline}}} is "strongly discouraged".

--
Ticket URL: <https://dev.mutt.org/trac/ticket/3870#comment:6>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to