in reply to daniel:// stenberg://

Indeed, it was all manual code review. Fuzzing can only go so far in detecting logic flaws (since logic flaws rarely result in a crash, they're quite difficult to instrument).

As background: I spotted some unrelated commit to the .netrc parsing code and that brought this ancient code to my attention. Fairly quickly I could see that *something* was off but couldn't put a pin on it immediately. After some pondering, I could figure out a scenario that would show demonstrable information leak.

This entry was edited (9 months ago)