From: Denys Vlasenko <vda.linux@googlemail.com>
Date: Tue, 4 Jul 2017 14:52:45 +0000 (+0200)
Subject: tls: use capped SNI len everywhere
X-Git-Tag: 1_28_0~465
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=558aae1a3384fce626d98608730f3b2d919bb78f;p=oweals%2Fbusybox.git

tls: use capped SNI len everywhere

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
---

diff --git a/networking/tls.c b/networking/tls.c
index db518bf90..fd3cb0dba 100644
--- a/networking/tls.c
+++ b/networking/tls.c
@@ -1199,11 +1199,11 @@ static void send_client_hello_and_alloc_hsd(tls_state_t *tls, const char *sni)
 	};
 	struct client_hello *record;
 	int len;
-	int sni_len = sni ? strnlen(sni, 127) : 0;
+	int sni_len = sni ? strnlen(sni, 127 - 9) : 0;
 
 	len = sizeof(*record);
 	if (sni_len)
-		len += 11 + strlen(sni);
+		len += 11 + sni_len;
 	record = tls_get_outbuf(tls, len);
 	memset(record, 0, len);