Re: [Openvpn-devel] range-checking bug in route.c

2012-01-04 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/12/11 21:48, Gert Doering wrote: > Hi, > > when implementing the missing helpers for saving/restoring ipv6 route > option lists, I noticed that the existing code has safeguards against > buffer overruns, but they do not work in all circumstanc

[Openvpn-devel] range-checking bug in route.c

2011-12-30 Thread Gert Doering
Hi, when implementing the missing helpers for saving/restoring ipv6 route option lists, I noticed that the existing code has safeguards against buffer overruns, but they do not work in all circumstances. Imagine: - source list: capacity = 20, n = 5 (only 5 items in there) - destination list: c