MSN DC null pointer dereference

John Bailey rekkanoryo at rekkanoryo.org
Mon Dec 20 21:18:50 EST 2010


On 12/19/2010 03:37 PM, Elliott Sales de Andrade wrote:
> I have attached a patch to do so. The patch also fixes an invalid
> (logic-wise) copy of the buffer. This copy is harmless, since it would
> never be acted upon once the packet is ignored, but it's wrong,
> nonetheless.

This should be disclosed to the packagers list ASAP.  I propose that we aim for
me to push a release late Sunday evening (2010-12-26).

John

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://pidgin.im/cgi-bin/mailman/private/security/attachments/20101220/169aa752/attachment.pgp>


More information about the security mailing list