--
Fixed in rsalz-monolith branch of akamai/openssl fork on github. To be part of
release after 1.0.2; thanks.

commit 9e4deeb2417c2832f023f4ef9ba6565dbe188b19
Author: OpenBSD via Matthew Haub <[email protected]>
Date: Tue Aug 19 10:32:26 2014 -0400

RT2243: Could run off end of buffer in s_client

The openssl command line tool treats the non-null terminated buffer
"mbuf" as a C string when using the pop3 s_client feature. This causes
a segmentation fault with malloc.conf option "J" set when BIO_printf()
runs off the end of the buffer. The patch from OpenBSD fixes the issue.

--
Rich Salz, OpenSSL dev team; [email protected]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to