signed_descriptor_get_body_impl doesn't guarantee null-terminated string
We're using strings returned from signed_descriptor_get_body_impl() as if they were null-terminated in two places, but its documentation states that this isn't guaranteed. The two places I found are:
in signed_desc_append_to_journal(), we call strlen on it
in routerlist_reparse_old(), we call router_parse_entry_from_string() on it, and further down the chain we use strstr
A sidecomment by rieo from a while back made me look at this.
[Automatically added by flyspray2trac: Operating System: All]