[gnutls-dev] [PATCH 1/1] crt_get_issuer_dn and friends request the wrong sized buffer

[Adam Langley]

With GnuTLS 1.2.[34] calling gnutls_x509_crt_get_issuer_dn with a NULL
parameter will cause the function to request (by filling out the int
*size argument) a buffer which is one byte too small. Calling the
function again with a buffer of the requested size will fail.

When a larger buffer is provided, the returned size is one byte too
large as it includes the NUL terminator which seems to be counter to
the convention in GnuTLS.


AGL

-- 
Adam Langley                                      address@hidden
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60

gnutls-1.2.4-fix-dn-requested-size.patch
Description: Binary data