Re: patch for POP client bug #66407, inc long lines (0/2)
Stephen Gildea <[email protected]> Fri, 22 Nov 2024 15:04:04 -0800
| Newsgroups | gmane.mail.nmh.devel |
|---|---|
| Message-ID | <[email protected]> |
I think I have found the bug. In traverse(), when the buffer is full, at about popsbr.c line 656, "slen" is the size of "response", so setting response[slen] to NUL writes one byte beyond the array. < Stephen