Msn Icon DOS on 2.6.5

John Bailey rekkanoryo at rekkanoryo.org
Thu Feb 18 19:05:36 EST 2010


On 02/18/2010 01:24 AM, Elliott Sales de Andrade wrote:
> I can confirm this crash. I have attached a patch that fixes this issue.
> 
> I also checked other uses of msn_message_get_bin_data and they appear to
> be fine.

Is this really something we should consider low severity?  If not, we should
probably ctry to do a minimal 2.6.7 soon that contains only this and other very
important bug fixes--with no string changes allowed.  Either way, everyone
agreeing on a public disclosure date would be a good idea.

John


More information about the security mailing list