Re: Memory overrun in http-push.c
- From
- Florian Weimer <fw@deneb.enyo.de>
- Date
- Feb 28, 2007, 16:36 UTC
- Message-ID
- <87tzx6i6hw.fsf@mid.deneb.enyo.de>
- In-Reply-To
- <20070228151516.GC57456@codelabs.ru>
* Eygene Ryabinkin:
> Spotted the memory overrun in the http-push.c. Exists at least in > 1.5.0.x, not sure about latest development branch. The patch is > attached.
Is this issue security-relevant? After all, the misplaced pointer is dereferenced and written to.