oss-security - Re: Polipo: denial-of-service using range

Message-ID: <YRWF6v8z5rgdewsM@sol.nexus.lan>
Date: Thu, 12 Aug 2021 20:35:28 +0000
From: John Helmert III <jchelmert3@...teo.net>
To: oss-security@...ts.openwall.com
Subject: Re: Polipo: denial-of-service using range

I'm only able to reproduce such a heap overflow when specifying a Range
header with a valid range, e.g. "2-3" whereas the original Perl script
tested an invalid range of "3-2".

Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.