[pcre-dev] query about buffer overflow bug in versiosns < 7.…

Páxina inicial
Borrar esta mensaxe
Autor: Rashmi Badan
Data:  
Para: pcre-dev
Asunto: [pcre-dev] query about buffer overflow bug in versiosns < 7.0
Hi,

I have a query regarding the recent buffer overflow bug meniotioned @ *
http://bugs.gentoo.org/show_bug.cgi?id=228091<http://bugs.gentoo.org/show_bug.cgi?id=228091%29>

*I do not see that piece of code in versions of the PCRE < 7.0, atleast the
'if' block containing the fix does not exist in these versions. Does this
mean that this is not a vulnerability in these earlier versions ? Also,
would it also mean that it is not a vulnerability in the much earlier
versions like 3.0 as well ?

Rgds,
Rashmi