Msn Icon DOS on 2.6.5
rekkanoryo at rekkanoryo.org
Thu Feb 18 19:05:36 EST 2010
On 02/18/2010 01:24 AM, Elliott Sales de Andrade wrote:
> I can confirm this crash. I have attached a patch that fixes this issue.
> I also checked other uses of msn_message_get_bin_data and they appear to
> be fine.
Is this really something we should consider low severity? If not, we should
probably ctry to do a minimal 2.6.7 soon that contains only this and other very
important bug fixes--with no string changes allowed. Either way, everyone
agreeing on a public disclosure date would be a good idea.
More information about the security