On Mon, Jun 24, 2002 at 10:44:54PM -0400, Ben Hyde wrote: > Let's put the patch back.
I believe the patch is out there and has been out there since yesterday, my mirror picked it up last night. FWIW, as far as I can tell the patch fixes all potential sign-bit overflows of the chunk-extention handling. Here's my +1 I think our best bet at this point would be to reevaluate all uses of memcpy() and make sure that we aren't passing in any negative offsets. -aaron