tls1_process_heartbeat() and dtls1_process_heartbeat() both call OPENSSL_malloc 
without checking its return value.
Tamir Zegman| Security Architect
Check Point Software Technologies | * +972.3.7534606 | * 
[email protected]<mailto:[email protected]>


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to