ssl_cipher_process_rulestr: don't read outside rule_str buffer
authormillert <millert@openbsd.org>
Wed, 7 Sep 2022 21:34:22 +0000 (21:34 +0000)
committermillert <millert@openbsd.org>
Wed, 7 Sep 2022 21:34:22 +0000 (21:34 +0000)
commitcce5ad9f407ef06e47402da44a7e4cd1c60440ea
treef27da50c5a36c46315e9468801caf967cf0b1d7c
parent3cba56066040e6ce7ab5b74af0dc056393de0f66
ssl_cipher_process_rulestr: don't read outside rule_str buffer
If rule_str ended in a "-", "l" was incremented one byte past the
end of the buffer.  This resulted in an out-of-bounds read when "l"
is dereferenced at the end of the loop.  OK tb@
lib/libssl/ssl_ciph.c