Re: [Libevent-users] Re: Advisory: integer overflow in evbuffers for Libevent <= 1.4.14b,2.0.21,2.1.4-alpha [CVE-2014-6272]

[Mark Ellzey <mthomas@xxxxxxxxxx>]

On Mon, Jan 05, 2015 at 02:31:34PM -0600, Mark Ellzey wrote:
> On Mon, Jan 05, 2015 at 10:36:30AM -0500, Nick Mathewson wrote:
> > On Mon, Jan 5, 2015 at 10:27 AM, Nick Mathewson <nickm@xxxxxxxxxxxxx> wrote:
> > 
> > Incidentally, at least one programmer I respect tells me he's pretty
> > sure that the heap overflow issue can't occur on modern systems in
> > practice, and only the infinite-loop issue is relevant.  I'll let him
> > explain his reasoning here if he wants to.  Personally, I prefer a
> > "better safe than sorry" approach.
> > 
> > yrs,
> > -- 
> > Nick
> 
> 
> Was that me?
> 

Oops, not supposed to have gone to the list.

> 
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxx with
unsubscribe libevent-users    in the body.