diff --git a/OpenSSL/crypto/x509ext.c b/OpenSSL/crypto/x509ext.c
index caa78b0..e075ae7 100644
--- a/OpenSSL/crypto/x509ext.c
+++ b/OpenSSL/crypto/x509ext.c
@@ -237,8 +237,10 @@
 }
 
 
-/* Special handling of subjectAltName, see CVE-2013-4073 */
-
+/* Special handling of subjectAltName.  OpenSSL's builtin formatter,
+ * X509V3_EXT_print, mishandles NUL bytes allowing a truncated display that
+ * does not accurately reflect what's in the extension.
+ */
 int
 crypto_X509Extension_str_san(crypto_X509ExtensionObj *self, BIO *bio)
 {