• M
    Refactor Identity Hint handling · e3ea3afd
    Matt Caswell 提交于
    Don't call strncpy with strlen of the source as the length. Don't call
    strlen multiple times. Eventually we will want to replace this with a proper
    PACKET style handling (but for construction of PACKETs instead of just
    reading them as it is now). For now though this is safe because
    PSK_MAX_IDENTITY_LEN will always fit into the destination buffer.
    
    This addresses an OCAP Audit issue.
    Reviewed-by: NRichard Levitte <levitte@openssl.org>
    e3ea3afd
statem_srvr.c 102.8 KB