Merge r179781 from trunk: * modules/ssl/ssl_engine_kernel.c (ssl_callback_SSLVerify_CRL): Fix off-by-one. PR: 35081 Submitted by: Marc Stern <mstern csc.com> Reviewed by: jorton, trawick, pquerna --- 2.0.x/modules/ssl/ssl_engine_kernel.c +++ 2.0.x/modules/ssl/ssl_engine_kernel.c @@ -1398,7 +1398,7 @@ BIO_printf(bio, ", nextUpdate: "); ASN1_UTCTIME_print(bio, X509_CRL_get_nextUpdate(crl)); - n = BIO_read(bio, buff, sizeof(buff)); + n = BIO_read(bio, buff, sizeof(buff) - 1); buff[n] = '\0'; BIO_free(bio);