ssl vulnerability

http://heartbleed.com

Reminder to update your machines and invalidate your possibly compromised certs.

cross posted from /g/

>>36
Intended region in general is loose ended. But if you limit the meaning you can get enough results to catch bugs like buffer over reads and writes.


int* a = malloc(n*sizeof(int)); // a points to a buffer of size n*sizeof(int)
int a[34]; // a is a buffer of size 34*sizeof(int)

....

... = a[n]; // Is n always less than a's length in this code path?
.... read(fd, buffer, n); // is n shorter than the length of buffer?