From c53cad81f8f98e62b86a81203b7cebd54e12f2c6 Mon Sep 17 00:00:00 2001 From: Raghav Kapoor Date: Wed, 28 Aug 2013 15:17:46 +0530 Subject: [PATCH] BUG#17294150-POTENTIAL CRASH DUE TO BUFFER OVERRUN IN SSL ERROR HANDLING CODE BACKGROUND: There can be a potential crash due to buffer overrun in SSL error handling code due to missing comma in ssl_error_string[] array in viosslfactories.c. ANALYSIS: Found by code Inspection. FIX: Added the missing comma in SSL error handling code in ssl_error_string[] array in viosslfactories.c. --- vio/viosslfactories.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vio/viosslfactories.c b/vio/viosslfactories.c index 5d31d1dde56..9f689bf7c86 100644 --- a/vio/viosslfactories.c +++ b/vio/viosslfactories.c @@ -80,7 +80,7 @@ ssl_error_string[] = "No error", "Unable to get certificate", "Unable to get private key", - "Private key does not match the certificate public key" + "Private key does not match the certificate public key", "SSL_CTX_set_default_verify_paths failed", "Failed to set ciphers to use", "SSL_CTX_new failed"