forked from wolfSSL/wolfssl
do size check on user password input
This commit is contained in:
@@ -1063,7 +1063,7 @@ static INLINE int OurPasswordCb(char* passwd, int sz, int rw, void* userdata)
|
|||||||
return 0;
|
return 0;
|
||||||
|
|
||||||
XSTRNCPY(passwd, (char*)userdata, sz);
|
XSTRNCPY(passwd, (char*)userdata, sz);
|
||||||
return (int)XSTRLEN((char*)userdata);
|
return min((word32)sz, (word32)XSTRLEN((char*)userdata));
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user