From 744976d4d6e6c8f8ea36ad19a6570c45f21aa4f4 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Wed, 7 Feb 2018 23:09:55 +0000 Subject: DKIM: fix buffer overflow in verify Caused crash in free() by corrupting malloc metadata. Reported-by: University of Cambridge Broken-by: 80a47a2c96 --- doc/doc-txt/ChangeLog | 3 +++ 1 file changed, 3 insertions(+) (limited to 'doc') diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 8221fb564..868e59106 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -82,6 +82,9 @@ JH/15 Relax results from ACL control request to enable cutthrough, in ignoring. This covers use with PRDR, frozen messages, queue-only and fake-reject. +JH/16 Fix bug in DKIM verify: a buffer overflow could corrupt the malloc + metadata, resulting in a crash in free(). + Exim version 4.90 ----------------- -- cgit v1.2.3