openssl/crypto/http
Tomas Mraz 89e790ac43 use_proxy(): Add missing terminating NUL byte
Fixes CVE-2025-9232

There is a missing terminating NUL byte after strncpy() call.
Issue and a proposed fix reported by Stanislav Fort (Aisle Research).

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 6bca15039e)
2025-09-29 12:04:39 +02:00
..
build.info Generalize the HTTP client so far implemented mostly in crypto/ocsp/ocsp_ht.c 2020-02-10 16:49:37 +01:00
http_client.c OSSL_HTTP_open(): fix completion with default port for IPv6 host addresses 2024-09-23 22:17:07 +02:00
http_err.c OSSL_HTTP_get(): Fix timeout handling on redirection 2021-12-09 18:10:07 +01:00
http_lib.c use_proxy(): Add missing terminating NUL byte 2025-09-29 12:04:39 +02:00