Re: [exim] a question about auth_client_item()

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: Re: [exim] a question about auth_client_item()
On 18/03/2019 14:40, zerons via Exim-users wrote:
> https://github.com/Exim/exim/blob/master/src/src/auths/get_data.c#L172
>
> I didn't do full test.
> I wonder if `ss` could be something like this: '^^^^', or '^^aaaaaaaa^'.
> If so, then `len` could be less than `i`, lead to memory corruption in
> memmove.


172 for (int i = 0; i < len; i++)

If len is less than i, the loop exits. No call to memmove.
--
Cheers,
Jeremy