Hi,

there's a bug which causes an out-of-bounds read in qrp_step_compute():

0 == memcmp(routing_table->arena, table, slots)

arena was allocated in qrt_compact() and memcmp() reads 88 beyond the
allocated buffer. I assume slots should be slots/8. 

-- 
Christian

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to