[Haskell-cafe] Heart Bleed bug in OpenSSL

Andras Slemmer 0slemi0 at gmail.com
Wed Apr 9 08:38:12 UTC 2014


Heartbleed is caused by an unchecked memcpy. In particular the size of the
memory chunk to be copied is retrieved from a client request and and is not
checked


On 9 April 2014 10:15, Vasili I. Galchin <vigalchin at gmail.com> wrote:

> http://heartbleed.com/
>
> Ok .. I just scanned this .. but is this problem a "logic" bug in the
> OpenSSL C/C++ code or is a type correctness issue?
>
> Thanks,
>
> Vasili
>
> _______________________________________________
> Haskell-Cafe mailing list
> Haskell-Cafe at haskell.org
> http://www.haskell.org/mailman/listinfo/haskell-cafe
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.haskell.org/pipermail/haskell-cafe/attachments/20140409/dbd1d902/attachment.html>


More information about the Haskell-Cafe mailing list