diff options
author | Richard Levitte <levitte@openssl.org> | 2021-08-17 08:46:23 +0200 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2021-08-18 17:05:57 +0200 |
commit | 4e92d5c79d501d09a978fd896c715da07902d8b7 (patch) | |
tree | e2e1244851133ccb31593d4b15d8323f81d70c12 /doc | |
parent | 2fbf0a560d77551d37e188b2d230b8fd8a94ac1f (diff) |
EVP_PKEY_get_utf8_string_param(): ensure the string is NUL terminated
A check is added to fail this function if the string buffer isn't
large enough to accomodate a terminating NUL byte.
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16334)
Diffstat (limited to 'doc')
-rw-r--r-- | doc/man3/EVP_PKEY_gettable_params.pod | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/doc/man3/EVP_PKEY_gettable_params.pod b/doc/man3/EVP_PKEY_gettable_params.pod index 27240b0d3b..4c0737d050 100644 --- a/doc/man3/EVP_PKEY_gettable_params.pod +++ b/doc/man3/EVP_PKEY_gettable_params.pod @@ -47,14 +47,16 @@ EVP_PKEY_get_bn_param() retrieves a key I<pkey> BIGNUM value I<**bn> associated with a name of I<key_name>. If I<*bn> is NULL then the BIGNUM is allocated by the method. -EVP_PKEY_get_utf8_string_param() get a key I<pkey> UTF8 string value int a buffer -I<str> of maximum size I<max_buf_sz> associated with a name of I<key_name>. -If I<out_sz> is not NULL the I<*out_sz> is set to the length of the string +EVP_PKEY_get_utf8_string_param() get a key I<pkey> UTF8 string value into a +buffer I<str> of maximum size I<max_buf_sz> associated with a name of +I<key_name>. The maximum size must be large enough to accomodate the string +value including a terminating NUL byte, or this function will fail. +If I<out_len> is not NULL, I<*out_len> is set to the length of the string not including the terminating NUL byte. -EVP_PKEY_get_octet_string_param() copy a I<pkey>'s octet string value into a buffer -I<buf> of maximum size I<max_buf_sz> associated with a name of I<key_name>. -I<*out_sz> is the returned size of the buffer if it is not NULL. +EVP_PKEY_get_octet_string_param() get a key I<pkey>'s octet string value into a +buffer I<buf> of maximum size I<max_buf_sz> associated with a name of I<key_name>. +If I<out_len> is not NULL, I<*out_len> is set to the length of the contents. =head1 NOTES |