10 ms·

I'm very curious to see the change that introduced the bug in the first place. According to the announcement it was introduced in 1.0.1. That's the version that

I'm very curious to see the change that introduced the bug in the first place. According to the announcement it was introduced in 1.0.1. That's the version that added Heartbeat support, so maybe it was a bug from the beginning.

syzzer 13y ago
Yes, this has been introduced in the original heartbeat extension commit (01-01-2012): http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bd6941cfaa31ee8a3f8661cb98227a5cbcc0f9f3 http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bd69...