openssl/apps
Benny Baumann aac6ae3774 Avoid unchecked string concatenation
To avoid the issue of overflowing the buffer start while
building up the help string prefix this rewrite of the
string building logic does multiple smaller writes to
opt_printf_stderr. While this is slower it completely
avoids the buffer overflow issue and does not place
any (unchecked) length constraints on the name of passed
options. Instead such long options are gracefully
wrapped onto the next line.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12265)
2022-05-23 10:07:09 +10:00
..
demoSRP
include Update copyright year 2022-05-03 13:34:51 +01:00
lib Avoid unchecked string concatenation 2022-05-23 10:07:09 +10:00
asn1parse.c
build.info
ca-cert.srl
ca-key.pem
ca-req.pem
ca.c str[n]casecmp => OPENSSL_strncasecmp 2022-04-22 11:34:41 +02:00
CA.pl.in
cert.pem
ciphers.c Update copyright year 2022-05-03 13:34:51 +01:00
client.pem
cmp.c Update copyright year 2022-05-03 13:34:51 +01:00
cms.c Update copyright year 2022-05-03 13:34:51 +01:00
crl2pkcs7.c
crl.c Update copyright year 2022-05-03 13:34:51 +01:00
ct_log_list.cnf
dgst.c Update copyright year 2022-05-03 13:34:51 +01:00
dhparam.c openssl: dhparam: Print warning if -in argument is ignored 2022-05-04 09:29:17 +02:00
dsa512.pem
dsa1024.pem
dsa-ca.pem
dsa-pca.pem
dsa.c Update copyright year 2022-05-03 13:34:51 +01:00
dsap.pem
dsaparam.c Update copyright year 2022-05-03 13:34:51 +01:00
ec.c Update copyright year 2022-05-03 13:34:51 +01:00
ecparam.c Update copyright year 2022-05-03 13:34:51 +01:00
enc.c Update copyright year 2022-05-03 13:34:51 +01:00
engine.c
errstr.c
fipsinstall.c
gendsa.c Update copyright year 2022-05-03 13:34:51 +01:00
genpkey.c Update copyright year 2022-05-03 13:34:51 +01:00
genrsa.c Update copyright year 2022-05-03 13:34:51 +01:00
info.c
insta.ca.crt
kdf.c
list.c Update copyright year 2022-05-03 13:34:51 +01:00
mac.c
nseq.c
ocsp.c Update copyright year 2022-05-03 13:34:51 +01:00
openssl-vms.cnf
openssl.c
openssl.cnf
passwd.c Update copyright year 2022-05-03 13:34:51 +01:00
pca-cert.srl
pca-key.pem
pca-req.pem
pkcs7.c Update copyright year 2022-05-03 13:34:51 +01:00
pkcs8.c
pkcs12.c Update copyright year 2022-05-03 13:34:51 +01:00
pkey.c Update copyright year 2022-05-03 13:34:51 +01:00
pkeyparam.c
pkeyutl.c Update copyright year 2022-05-03 13:34:51 +01:00
prime.c Update copyright year 2022-05-03 13:34:51 +01:00
privkey.pem
progs.pl Update copyright year 2022-05-03 13:34:51 +01:00
rand.c Update copyright year 2022-05-03 13:34:51 +01:00
rehash.c Update copyright year 2022-05-03 13:34:51 +01:00
req.c Update copyright year 2022-05-03 13:34:51 +01:00
req.pem
rsa8192.pem
rsa.c Update copyright year 2022-05-03 13:34:51 +01:00
rsautl.c
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_client.c s_client -proxy / -starttls shouldn't be mutually exclusive 2022-05-05 13:36:23 +02:00
s_server.c s_serve: Report an error if init-connection fails without an attempt to read. 2022-05-06 14:57:07 +02:00
s_time.c
server2.pem
server.pem
server.srl
sess_id.c
smime.c Update copyright year 2022-05-03 13:34:51 +01:00
speed.c Fix Coverity 1503314 unchecked return value 2022-05-04 17:15:20 +10:00
spkac.c
srp.c
storeutl.c Update copyright year 2022-05-03 13:34:51 +01:00
testCA.pem
testdsa.h
testrsa.h
timeouts.h
ts.c Update copyright year 2022-05-03 13:34:51 +01:00
tsget.in
verify.c Update copyright year 2022-05-03 13:34:51 +01:00
version.c
vms_decc_init.c
x509.c Update copyright year 2022-05-03 13:34:51 +01:00