Hi Mike,
I downloaded the test and successfully ran it in my local build. Two
changes were required (Ubuntu 13.04. gcc 4.8.1) to satisfy the compiler:
- At line 170, move the declaration of "int i" outside the 'for'
- Replace strlcpy (undefined) with a memcpy, although there may be
better choices.
I would like to see this go into the openssl test suite, perhaps
changing the name to a more general "heartbeat_test.c" in the
expectation of adding more heartbeat-related cases soon! Thanks for your
effort; it has already helped me with the testing of a patch-in-progress.
Regards,
Pete Dettman
On 13/04/2014 6:39 AM, Mike Bland wrote:
I've prepared a proof-of-concept unit/regression test for the
Heartbleed bug that I've posted at: http://goo.gl/wTYD9K
If folks are interested, I can prepare an official patch to add it to
OpenSSL.
Thanks,
Mike
[email protected] <mailto:[email protected]>
