Don't write out more than we have allocated in obj_txt, as the glory

that is OBJ_obj2txt() can return a larger value..
ok tedu@

2 files changed, 4 insertions, 2 deletions

diff --git a/src/lib/libcrypto/ts/ts_lib.c b/src/lib/libcrypto/ts/ts_lib.c
index 81a5f23cd5..b9d92a3012 100644
--- a/src/lib/libcrypto/ts/ts_lib.c
+++ b/src/lib/libcrypto/ts/ts_lib.c
@@ -92,9 +92,10 @@ TS_OBJ_print_bio(BIO *bio, const ASN1_OBJECT *obj)
         char obj_txt[128];
 
         int len = OBJ_obj2txt(obj_txt, sizeof(obj_txt), obj, 0);
+        if (len >= sizeof(obj_txt))
+                len = sizeof(obj_txt) - 1;
         BIO_write(bio, obj_txt, len);
         BIO_write(bio, "\n", 1);
-
         return 1;
 }
 
diff --git a/src/lib/libssl/src/crypto/ts/ts_lib.c b/src/lib/libssl/src/crypto/ts/ts_lib.c
index 81a5f23cd5..b9d92a3012 100644
--- a/src/lib/libssl/src/crypto/ts/ts_lib.c
+++ b/src/lib/libssl/src/crypto/ts/ts_lib.c
@@ -92,9 +92,10 @@ TS_OBJ_print_bio(BIO *bio, const ASN1_OBJECT *obj)
         char obj_txt[128];
 
         int len = OBJ_obj2txt(obj_txt, sizeof(obj_txt), obj, 0);
+        if (len >= sizeof(obj_txt))
+                len = sizeof(obj_txt) - 1;
         BIO_write(bio, obj_txt, len);
         BIO_write(bio, "\n", 1);
-
         return 1;
 }