Re: FW: [Full-Disclosure] Netscape/Mozilla: Exploitable heap corruptionvia jar: URI handler.

[Boris Zbarsky]

Puke_esq wrote:

Has this bug been fixed yet?

Yes. If you knew the file involved, you could check it trivially via LXR. As it is, a simple search on the code snippet you included shows that it was fixed on Oct 30 -- http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/modules/libjar/nsZipArchive.cpp