4 ms·
The bug he is referring to is not in heartbeat, but rather in OpenSSL's use of its own allocator. I am not claiming that it would be difficult to find invalid
by gizmo686 13y ago
The bug he is referring to is not in heartbeat, but rather in OpenSSL's use of its own allocator.
I am not claiming that it would be difficult to find invalid memory usage in OpenSSL, rather I am claiming that the particular invalid usage that led to heartbleed would be difficult to find, becuase it does not occur under normal circumstances.