On 18/03/2019 14:40, zerons via Exim-users wrote: > https://github.com/Exim/exim/blob/master/src/src/auths/get_data.c#L172 > > I didn't do full test. > I wonder if `ss` could be something like this: '^^^^', or '^^aaaaaaaa^'. > If so, then `len` could be less than `i`, lead to memory corruption in > memmove.
172 for (int i = 0; i < len; i++) If len is less than i, the loop exits. No call to memmove. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
