[cpp-xmltooling] branch master updated: CPPXT-109 - XSECCryptoX509CRL::loadX509CRLPEM() can read past unterminated buffer

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository cpp-xmltooling.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-xmltooling.git;a=commit;h=db08101c3854518a59096be95ed6564838381744

The following commit(s) were added to refs/heads/master by this push:
       new  db08101   CPPXT-109 - XSECCryptoX509CRL::loadX509CRLPEM() can read past unterminated buffer
db08101 is described below

commit db08101c3854518a59096be95ed6564838381744
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Sun Jun 26 15:25:31 2016 -0400

    CPPXT-109 - XSECCryptoX509CRL::loadX509CRLPEM() can read past unterminated buffer
    
    https://issues.shibboleth.net/jira/browse/CPPXT-109
---
 xmltooling/security/impl/XSECCryptoX509CRL.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xmltooling/security/impl/XSECCryptoX509CRL.cpp b/xmltooling/security/impl/XSECCryptoX509CRL.cpp
index 2d2a280..59ee697 100644
--- a/xmltooling/security/impl/XSECCryptoX509CRL.cpp
+++ b/xmltooling/security/impl/XSECCryptoX509CRL.cpp
@@ -53,7 +53,7 @@ void XSECCryptoX509CRL::loadX509CRLPEM(const char* buf, unsigned int len)
 		b = b1;
 	}
 
-	const char *p = strstr(buf, "-----BEGIN X509 CRL-----");
+	const char *p = strstr(b, "-----BEGIN X509 CRL-----");
 
 	if (p == nullptr) {
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.