in CONF_get1_default_config_file(), don't calculate a buffer size,
authorderaadt <deraadt@openbsd.org>
Fri, 18 Apr 2014 13:38:31 +0000 (13:38 +0000)
committerderaadt <deraadt@openbsd.org>
Fri, 18 Apr 2014 13:38:31 +0000 (13:38 +0000)
commit1297a291c4cf71e11a01c38ced87848d0e516cc7
tree89126c57f2934541565e6a9b2d3256a99be90efa
parentcdff601ac7362f702445f15b6fc2204f9821c627
in CONF_get1_default_config_file(), don't calculate a buffer size,
malloc it, do unbounded strlcpy's to it... but instead of asnprintf.
While there, let's put a '/' between the two path components!  Wonder
how old that bug is..
ok guenther
lib/libcrypto/conf/conf_mod.c
lib/libssl/src/crypto/conf/conf_mod.c