Looks like though the logic is quite a bit different here: https://gitorious.org/gnutls/gnutls/commit/328ee22c1b3951e060c7124c7cb1cee592c59bc0
We have: for (i = 2; i <= pad; i++) where upstream has: for (i = 2; i <= MIN(256, ciphertext->size); i++) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1166634 Title: gnutls26 crashes on particularly malformed crypt stream To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1166634/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
