diff options
| author | wchang0222%aol.com <devnull@localhost> | 2003-11-07 17:05:28 +0000 |
|---|---|---|
| committer | wchang0222%aol.com <devnull@localhost> | 2003-11-07 17:05:28 +0000 |
| commit | 50b6927b924455ac21ce7c593c3aa6be74a89bd2 (patch) | |
| tree | 33111db8994c08183e7f8ec0309d50393c3609c0 | |
| parent | 8bd2707955c14df352a86c6b67b7e0afd9803158 (diff) | |
| download | nss-hg-50b6927b924455ac21ce7c593c3aa6be74a89bd2.tar.gz | |
Carried the fixes in rev. 1.10 and rev. 1.17 back to the NSS_3_4_BRANCH.NSS_3_4_5_RTM
| -rw-r--r-- | security/nss/lib/certdb/alg1485.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/security/nss/lib/certdb/alg1485.c b/security/nss/lib/certdb/alg1485.c index 92885e540..c744ac6fd 100644 --- a/security/nss/lib/certdb/alg1485.c +++ b/security/nss/lib/certdb/alg1485.c @@ -681,6 +681,11 @@ AppendAVA(char **bufp, unsigned *buflenp, CERTAVA *ava) } len = PORT_Strlen(tagName); + if (len+1 > sizeof(tmpBuf)) { + SECITEM_FreeItem(avaValue, PR_TRUE); + PORT_SetError(SEC_ERROR_OUTPUT_LEN); + return SECFailure; + } PORT_Memcpy(tmpBuf, tagName, len); tmpBuf[len++] = '='; |