Clean up dangerous strncpy use. This included a use where the resulting

string was potentially not nul terminated and a place where malloc return
was unchecked.
while we're at it remove dummytest.c
ok miod@

1 files changed, 6 insertions, 4 deletions

diff --git a/src/lib/libcrypto/x509v3/v3_alt.c b/src/lib/libcrypto/x509v3/v3_alt.c
index 66ea96db51..8de5dd041b 100644
--- a/src/lib/libcrypto/x509v3/v3_alt.c
+++ b/src/lib/libcrypto/x509v3/v3_alt.c
@@ -579,10 +579,12 @@ static int do_othername(GENERAL_NAME *gen, char *value, X509V3_CTX *ctx)
                 return 0;
         objlen = p - value;
         objtmp = OPENSSL_malloc(objlen + 1);
-        strncpy(objtmp, value, objlen);
-        objtmp[objlen] = 0;
-        gen->d.otherName->type_id = OBJ_txt2obj(objtmp, 0);
-        OPENSSL_free(objtmp);   
+        if (objtmp) {
+                strlcpy(objtmp, value, objlen + 1);
+                gen->d.otherName->type_id = OBJ_txt2obj(objtmp, 0);
+                OPENSSL_free(objtmp);
+        } else
+                gen->d.otherName->type_id = NULL;
         if (!gen->d.otherName->type_id)
                 return 0;
         return 1;