[openssl-dev] [openssl.org #3592] bug report. Crash. Critical? Security bug?

Вячеслав Бадалян via RT rt at openssl.org
Mon Dec 15 11:35:06 UTC 2014


Hello. We got openssl assert on header len... sorry i can't send it to you
becouse i delete screen log :(

2014-12-14 4:07 GMT+03:00 Вячеслав Бадалян <v.badalyan at open-bs.ru>:
>
> We got openssl assert.
> 13 дек. 2014 г. 17:49 пользователь "Вячеслав Бадалян" <
> v.badalyan at open-bs.ru> написал:
>
> Thanks!
>> I apply patch and run test robot. On monday will send to you results.
>>
>> 2014-12-12 19:13 GMT+03:00 Matt Caswell via RT <rt at openssl.org>:
>>>
>>> On Wed Dec 10 10:08:48 2014, v.badalyan at open-bs.ru wrote:
>>> > Also valgrind output
>>> >
>>> > ==17767== Thread 37:
>>> > ==17767== Source and
>>> > destination overlap in memcpy(0x253bfcbd, 0x7e9c51b,
>>> > 4294967209)
>>> ^^^^^^^^^^^^ This is interesting. That equates to -87. I think there is a
>>> signed/unsigned conversion issue going on here.
>>>
>>> I have another patch. It is cummulative on the last one (i.e. apply the
>>> first
>>> one, and then apply this one on top). Keep your other change too
>>> (although I
>>> think that is an unrelated problem).
>>>
>>> Let me know how you get on.
>>>
>>> Matt
>>>
>>>
>>
>> --
>> С уважением,
>> Бадалян Вячеслав Борисович
>>
>> ООО "Открытые бизнес-решения"
>> Технический директор
>> +7 (495) 666-0-111
>> http://www.open-bs.ru
>>
>

-- 
С уважением,
Бадалян Вячеслав Борисович

ООО "Открытые бизнес-решения"
Технический директор
+7 (495) 666-0-111
http://www.open-bs.ru



More information about the openssl-dev mailing list