From 0bf3cde2a0a5554651867ade37daafcea49c9409 Mon Sep 17 00:00:00 2001 From: dece Date: Thu, 17 Jun 2021 13:25:25 +0200 Subject: Use strncpy to build TLS_CLIENT_HASH strncat on an uninitialized array leads to issues. --- src/serve.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/serve.c b/src/serve.c index b2d114e..da17f96 100644 --- a/src/serve.c +++ b/src/serve.c @@ -215,7 +215,7 @@ serve_cgi(struct gmnisrv_client *client, const char *path, // +7 for "SHA256:" prefix // +1 for null char char hex_digest[32*2 + 7 + 1]; - strncat(hex_digest, "SHA256:", 8); + strncpy(hex_digest, "SHA256:", 8); char *cur_pos = hex_digest + 7; for (int i = 0; i < 32; ++i) { -- cgit v1.2.3