Re: [exim] a question about auth_client_item()

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Jeremy Harris
Dátum:  
Címzett: exim-users
Tárgy: Re: [exim] a question about auth_client_item()
On 18/03/2019 14:40, zerons via Exim-users wrote:
> https://github.com/Exim/exim/blob/master/src/src/auths/get_data.c#L172
>
> I didn't do full test.
> I wonder if `ss` could be something like this: '^^^^', or '^^aaaaaaaa^'.
> If so, then `len` could be less than `i`, lead to memory corruption in
> memmove.


172 for (int i = 0; i < len; i++)

If len is less than i, the loop exits. No call to memmove.
--
Cheers,
Jeremy