- #42222, truncate the _default to the buffer size (was 200 since day #1, we don't need dynamic alloc here)

1 files changed, 3 insertions, 1 deletions

diff --git a/ext/openssl/openssl.c b/ext/openssl/openssl.c
index 032c9c25c6..781a6e6cbd 100644
--- a/ext/openssl/openssl.c
+++ b/ext/openssl/openssl.c
@@ -1739,7 +1739,9 @@ static int php_openssl_make_REQ(struct php_x509_request * req, X509_REQ * csr, z
 			if (strcmp("_default", type + len) != 0) {
 				continue;
 			}
-			
+			if (len > 200) {
+				len = 200;
+			}
 			memcpy(buffer, type, len);
 			buffer[len] = '\0';
 			type = buffer;