From: Florian Weimer <fw@deneb.enyo.de>
Date: Wed, 28 Feb 2007 16:36:43 GMT
Subject: Re: Memory overrun in http-push.c
Message-ID: <87tzx6i6hw.fsf@mid.deneb.enyo.de>
In-Reply-To: <20070228151516.GC57456@codelabs.ru>

* Eygene Ryabinkin:

> Spotted the memory overrun in the http-push.c. Exists at least in
> 1.5.0.x, not sure about latest development branch. The patch is
> attached.

Is this issue security-relevant?  After all, the misplaced pointer is
dereferenced and written to.