curl / curl / 10569

81%

master: 37%

Pull #3863

travis-ci

vtls: fix potential ssl_buffer stack overflow

In Curl_multissl_version() it was possible to overflow the passed in
buffer if the generated version string exceeded the size of the buffer.
Fix by inverting the logic, and also make sure to not exceed the local
buffer during the string generation.

Closes #xxxx
Reported-by: nevv on HackerOne/curl

3 of 3 new or added lines in 1 file covered. (100.0%)

2137 of 2692 relevant lines covered (79.38%)

0.0 hits per line