Re: [exim] a question about auth_client_item()

トップ ページ
このメッセージを削除
このメッセージに返信
著者: Jeremy Harris
日付:  
To: exim-users
題目: Re: [exim] a question about auth_client_item()
On 18/03/2019 14:40, zerons via Exim-users wrote:
> https://github.com/Exim/exim/blob/master/src/src/auths/get_data.c#L172
>
> I didn't do full test.
> I wonder if `ss` could be something like this: '^^^^', or '^^aaaaaaaa^'.
> If so, then `len` could be less than `i`, lead to memory corruption in
> memmove.


172 for (int i = 0; i < len; i++)

If len is less than i, the loop exits. No call to memmove.
--
Cheers,
Jeremy