[Bug] Lot's of 0000 padding in TLS 1.3 NSS keylog which was hook from libssl.so.3.0.12 by ecapture 2.6.0

@zidonghua-source

Describe the bug Lot's of 0000 padding in TLS 1.3 NSS keylog which was hook from libssl.so.3.0.12

To Reproduce Steps to reproduce the behavior:

1.sudo ./ecapture tls -m keylog --libssl=/lib64/libssl.so.3 2.more ecapture_openssl_key.log

Screenshots

Linux Server/Android (please complete the following information):

Device: Linux Server

Kernel Info: uname -a Linux VM-0-15-opencloudos 6.6.117-45.2.oc9.x86_64 #1 SMP Wed Jan 14 16:22:06 CST 2026 x86_64 x86_64 x86_64 GNU/Linux

eCapture Version: ecapture -v eCapture version: os_arch:v2.0.0-20260101-develop:default_kernel

Additional context I use mosquitto as a mqtt server to test mqtts. Mosquitto is dynamically linking to /lib64/libssl.so.3, which soft link to libssl.so.3.0.12.