From: Anatol Belski <ab@php.net>
Date: Mon, 29 Aug 2016 19:03:03 +0000 (+0200)
Subject: ensure null termination
X-Git-Tag: php-5.6.26RC1~9
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=d787b0ea13951e8653c903808b061bc859ff15fb;p=php

ensure null termination
---

diff --git a/ext/curl/interface.c b/ext/curl/interface.c
index 062f9969ae..02fbec7776 100644
--- a/ext/curl/interface.c
+++ b/ext/curl/interface.c
@@ -1851,8 +1851,9 @@ static void create_certinfo(struct curl_certinfo *ci, zval *listcode TSRMLS_DC)
 				int len;
 				char s[64];
 				char *tmp;
-				strncpy(s, slist->data, 64);
-				tmp = memchr(s, ':', 64);
+				strncpy(s, slist->data, sizeof(s));
+				s[sizeof(s)-1] = '\0';
+				tmp = memchr(s, ':', sizeof(s));
 				if(tmp) {
 					*tmp = '\0';
 					len = strlen(s);