Re: patch for POP client bug #66407, inc long lines (0/2)

stephen wrote:
 > I think I have found the bug.  In traverse(), when the buffer
 > is full, at about popsbr.c line 656, "slen" is the size of
 > "response", so setting response[slen] to NUL writes one byte
 > beyond the array.

Shocking!!   How can these things happen?!?    :-)

Do you have access to valgrind?  It would (should) have found this
pretty quickly.  And, it might find something else, if that's not
the only issue.

paul
=----------------------
paul fox, [email protected] (arlington, ma, where it's 43.6 degrees)