Pretty much, yes. Here's an analysis of the actual OpenSSL code: http://blog.existentialize.com/diagnosis-of-the-openssl-heartbleed-bug.html http://blog.exist

Pretty much, yes. Here's an analysis of the actual OpenSSL code: http://blog.existentialize.com/diagnosis-of-the-openssl-heartbleed-bug.html http://blog.existentialize.com/diagnosis-of-the-openssl-hear... Here's the patch itself: https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3#diff-2 https://github.com/openssl/openssl/commit/96db9023b881d7cd9f...