Fixed printable fingerprint buffer overflow. RedHat bug 372021.

[silc.git] / lib / silcutil / silcutil.h

diff --git a/lib/silcutil/silcutil.h b/lib/silcutil/silcutil.h
index 7aa40a4f21f87f2e11f0588b97009cfee272287f..4524a80b0c6642237c0599e10c8fedc17ffb7603 100644 (file)
--- a/lib/silcutil/silcutil.h
+++ b/lib/silcutil/silcutil.h
@@ -213,7 +213,9 @@ SilcBool silc_hash_client_id_compare(void *key1, void *key2,
  * DESCRIPTION
  *
  *    Return a textual representation of the fingerprint in *data, the
- *    caller must free the returned string.
+ *    caller must free the returned string.  Returns NULL on error.  If
+ *    the `data_len' is longer than 255 bytes, only the first 255 bytes are
+ *    used to create the fingerprint.
  *
  ***/
 char *silc_fingerprint(const unsigned char *data, SilcUInt32 data_len);