OpenSSL Heartbeat Codegithub.com/openssl 8 pointsMIT_Hacker12 years ago3 commentsSaveHideCopy link On HNComments−syncerr12yOpenSSL heartbeat bug patch (CVE-2014-0160):https://github.com/openssl/openssl/commit/731f431497f463f3a2...A missing bounds check in the handling of the TLS heartbeat extension can be used to reveal up to 64k of memory to a connected client or server.Previous discussion: https://news.ycombinator.com/item?id=7557825−askQi12yCan someone explain which part of the code contains the bug and why it is a bug?−smtddr12yhttps://github.com/openssl/openssl/commit/bd6941cfaa31ee8a3f...Amelek is being a bit harsh or just plain wrong; I learned a few days ago that checking malloc's return value means almost nothing:https://news.ycombinator.com/item?id=7541585
Comments
OpenSSL heartbeat bug patch (CVE-2014-0160):
https://github.com/openssl/openssl/commit/731f431497f463f3a2...
Previous discussion: https://news.ycombinator.com/item?id=7557825
Can someone explain which part of the code contains the bug and why it is a bug?
https://github.com/openssl/openssl/commit/bd6941cfaa31ee8a3f...
Amelek is being a bit harsh or just plain wrong; I learned a few days ago that checking malloc's return value means almost nothing:
https://news.ycombinator.com/item?id=7541585