# HG changeset patch # User Vladimir Homutov # Date 1444245582 -10800 # Node ID 2f34ea503ac4e015cc08f6efbb279b360eda609c # Parent 4b4aee40c508e79a536d85e74ae1ccfa19a3e5c2 SSL: handled long string truncation in ngx_ssl_error(). If no space left in buffer after adding formatting symbols, error message could be left without terminating null. The fix is to output message using actual length. diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -2045,7 +2045,7 @@ ngx_ssl_error(ngx_uint_t level, ngx_log_ (void) ERR_get_error(); } - ngx_log_error(level, log, err, "%s)", errstr); + ngx_log_error(level, log, err, "%*s)", p - errstr, errstr); }