nmh-workers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: patch for POP client bug #66407, inc long lines (0/2)


From: Ken Hornstein
Subject: Re: patch for POP client bug #66407, inc long lines (0/2)
Date: Wed, 20 Nov 2024 23:13:44 -0500

>*** bit out of range 0 - FD_SETSIZE on fd_set ***: terminated

Um, yikes.  That's ... odd.  That looks like it comes from:

        FD_SET(nsc->ns_readfd, &rfds);

in sbr/netsec.c, in netsec_fillread().  Unless there is a file descriptor
leak somewhere, I don't understand how nsc->ns_readfd got too big for
FD_SETSIZE, unless maybe a buffer overflow overwrite nsc->ns_readfd.
That's malloc'd memory, so possible a buffer was overwritten and it
clobbered that.  If you could figure out what the value of ns_readfd was
that would be interesting.

--Ken



reply via email to

[Prev in Thread] Current Thread [Next in Thread]