From d3c0135eec796e1f934348dc96df3fe6c4d2f8ce Mon Sep 17 00:00:00 2001
From: Jason Ish <ish@unx.ca>
Date: Tue, 23 Aug 2016 10:53:49 -0600
Subject: [PATCH] app-layer-tls: accomodate trailing \0 in hash output

---
 src/app-layer-tls-handshake.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/app-layer-tls-handshake.c b/src/app-layer-tls-handshake.c
index c95fd4373a..bc99097b20 100644
--- a/src/app-layer-tls-handshake.c
+++ b/src/app-layer-tls-handshake.c
@@ -181,7 +181,7 @@ int DecodeTLSHandshakeServerCertificate(SSLState *ssl_state, uint8_t *input,
             if (i == 0 && ssl_state->server_connp.cert0_fingerprint == NULL) {
                 int msg_len = cur_cert_length;
                 int hash_len = 20;
-                int out_len = 60;
+                int out_len = hash_len * 3 + 1;
                 char out[out_len];
                 unsigned char *hash;
                 hash = ComputeSHA1((unsigned char *) input, (int) msg_len);