[openssl-dev] Doubt about memory realloc logic in BUF_MEM_grow_clean and BUF_MEM_grow

Salz, Rich rsalz at akamai.com
Mon Apr 17 16:32:20 UTC 2017


>??????? memset(&str->data[str->length], 0, len - str->length);

The intent is to blank out everything from what was currently written.  This "covers up" possible pointer over-runs.

We could do just from the old max.


More information about the openssl-dev mailing list