File CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch of Package compat-openssl098.29205
Index: openssl-0.9.8j/crypto/asn1/t_x509a.c
===================================================================
--- openssl-0.9.8j.orig/crypto/asn1/t_x509a.c
+++ openssl-0.9.8j/crypto/asn1/t_x509a.c
@@ -96,8 +96,8 @@ int X509_CERT_AUX_print(BIO *out, X509_C
}
BIO_puts(out, "\n");
} else BIO_printf(out, "%*sNo Rejected Uses.\n", indent, "");
- if(aux->alias) BIO_printf(out, "%*sAlias: %s\n", indent, "",
- aux->alias->data);
+ if(aux->alias) BIO_printf(out, "%*sAlias: %.*s\n", indent, "",
+ aux->alias->length, aux->alias->data);
if(aux->keyid) {
BIO_printf(out, "%*sKey Id: ", indent, "");
for(i = 0; i < aux->keyid->length; i++)