[openssl-dev] [openssl.org #3818] [BUG] dovecot imap-login segfault when running nmap -sV

Florian Pritz via RT rt at openssl.org
Fri Apr 24 16:39:33 UTC 2015


On 23.04.2015 21:25, Matt Caswell via RT wrote:
> If I'm right then this is a dovecot bug to fix. Having said that OpenSSL should
> probably be more forgiving of this error condition. Please see attached patch
> for 1.0.2a. If this resolves the issue, then it confirms my suspicions. The
> patch simply ensures that any subsequent attempt to use the SSL object will
> immediately return with an error.

Hi,

I've applied the patch and verified that the bug is now indeed gone.
I'll forward that information to dovecot upstream.

Thank you for the quick diagnosis.

Florian


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150424/dafd50d4/attachment.sig>


More information about the openssl-dev mailing list