On Mon, Jun 24, 2002 at 10:44:54PM -0400, Ben Hyde wrote:
> Let's put the patch back.  

I believe the patch is out there and has been out there since yesterday,
my mirror picked it up last night.

FWIW, as far as I can tell the patch fixes all potential sign-bit
overflows of the chunk-extention handling. Here's my +1

I think our best bet at this point would be to reevaluate all uses
of memcpy() and make sure that we aren't passing in any negative
offsets.

-aaron

Reply via email to