From 645697f111983089fdcee0694d17480e0a05a3a5 Mon Sep 17 00:00:00 2001 From: Vladimir Homutov Date: Wed, 7 Oct 2015 22:19:42 +0300 Subject: SSL: handled long string truncation in ngx_ssl_error(). If no space left in buffer after adding formatting symbols, error message could be left without terminating null. The fix is to output message using actual length. --- src/event/ngx_event_openssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index e9edf314f..8550da9a9 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -2045,7 +2045,7 @@ ngx_ssl_error(ngx_uint_t level, ngx_log_t *log, ngx_err_t err, char *fmt, ...) (void) ERR_get_error(); } - ngx_log_error(level, log, err, "%s)", errstr); + ngx_log_error(level, log, err, "%*s)", p - errstr, errstr); } -- cgit