Serious OpenSSL vulnerability
Ranjan Maitra
maitra.mbox.ignored at inbox.com
Sun Apr 13 13:38:11 UTC 2014
On Sun, 13 Apr 2014 09:15:04 -0400 Rahul Sundaram <metherid at gmail.com>
wrote:
> Hi
>
>
> On Sun, Apr 13, 2014 at 6:23 AM, Timothy Murphy wrote:
>
> > Roger wrote:
> >
> > > It happened. It was known for years.
> >
> > Everything I have seen says it has been known for about 1 week.
> >
> > Incidentally, I am no programmer but I would have thought
> > it would be relatively simple to set up a test
> > to see if a "malloc"-ed space could be transgressed.
> >
>
> Not in this case. openssl uses a custom malloc
>
So, a valgrind -tool=memcheck --leak-check=yes --show-reachable=yes
--track-fds=yes --track-origins=yes would not have helped?
Ranjan
____________________________________________________________
FREE 3D MARINE AQUARIUM SCREENSAVER - Watch dolphins, sharks & orcas on your desktop!
Check it out at http://www.inbox.com/marineaquarium
More information about the users
mailing list