crypto: fix error message buffer overrun

ERR_error_string() expects a buffer of at least 256 bytes, the input buffer was not even half that size. Use ERR_error_string_n() instead.
nodejs · Sep 22, 2011 · 9ef962f · 9ef962f
1 parent 97d355c
commit 9ef962f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/node_crypto.cc b/src/node_crypto.cc
@@ -316,7 +316,7 @@ Handle<Value> SecureContext::SetCert(const Arguments& args) {
           String::New("SSL_CTX_use_certificate_chain")));
     }
     char string[120];
-    ERR_error_string(err, string);
+    ERR_error_string_n(err, string, sizeof string);
     return ThrowException(Exception::Error(String::New(string)));
   }