On 18/03/2019 14:40, zerons via Exim-users wrote:
> https://github.com/Exim/exim/blob/master/src/src/auths/get_data.c#L172
>
> I didn't do full test.
> I wonder if `ss` could be something like this: '^^^^', or '^^aaaaaaaa^'.
> If so, then `len` could be less than `i`, lead to memory corruption in
> memmove.
172 for (int i = 0; i < len; i++)
If len is less than i, the loop exits. No call to memmove.
--
Cheers,
Jeremy