Re: Possible Issue

2014-04-14 Thread Michael Tuexen
On 14 Apr 2014, at 08:33, Me ugobejishv...@gmail.com wrote: possible vulnerable file: openssl-1.0.1g/ssl/d1_clnt.c Line: 155 unsigned char sctpauthkey[64]; fixed sized arrays can be overflowed. To fix the problem, use functions that limit length, or ensure that the size is larger than the

RE: Possible Issue

2014-04-14 Thread Jeremy Farrell
From: Me [mailto:ugobejishv...@gmail.com] Sent: Monday, April 14, 2014 7:34 AM possible vulnerable file: openssl-1.0.1g/ssl/d1_clnt.c Line: 155 unsigned char sctpauthkey[64]; fixed sized arrays can be overflowed. True, but only because ALL arrays can be overflowed no matter how they are