Guy Harris
changed
bug 13246
| What |
Removed |
Added |
| Hardware |
x86-64
|
All
|
| OS |
Linux (other)
|
All
|
Comment # 14
on bug 13246
from Guy Harris
(In reply to Peter Wu from comment #1)
> Confirmed, this is not an exploitable issue though since the read is limited
> to the buffer size.
The worst-case situation is, I think, that the comparison will *happen* to
succeed on a file that's *not* a Daintree SNA file because the junk on the
stack *happens* to match. Unlikely, but the code was wrong and needed to be
fixed anyway.
You are receiving this mail because:
- You are watching all bug changes.