Add null-terminator to BIO_get_mem_data() output.

It turns out the output isn't necessarily null-terminated.

diff --git a/mutt_ssl.c b/mutt_ssl.c
index 30da838e9a00e05d3722d4c8016628970d077089..78d848982b9c4b448c1bcb5e1a09c191cf43cdf7 100644 (file)
--- a/mutt_ssl.c
+++ b/mutt_ssl.c
@@ -549,12 +549,20 @@ static void ssl_dprint_err_stack (void)
 #ifdef DEBUG
   BIO *bio;
   char *buf = NULL;
+  long buflen;
+  char *output;
 
   if (! (bio = BIO_new (BIO_s_mem ())))
     return;
   ERR_print_errors (bio);
-  if (BIO_get_mem_data (bio, &buf))
-    dprint (1, (debugfile, "SSL error stack: %s\n", buf));
+  if ((buflen = BIO_get_mem_data (bio, &buf)) > 0)
+  {
+    output = safe_malloc (buflen + 1);
+    memcpy (output, buf, buflen);
+    output[buflen] = '\0';
+    dprint (1, (debugfile, "SSL error stack: %s\n", output));
+    FREE (&output);
+  }
   BIO_free (bio);
 #endif
 }