Re: use-after-free in smtp digest-md5

[Kevin J. McCarthy]

On Mon, Apr 15, 2019 at 08:59:33AM +0200, Philipp Gesang wrote:

I’ve come across a use after free in sasl calls when
authenticating using digest-md5 against an smtp server:

Thanks for the trace.

PS: Bringing this up here because mutt is what crashes for me.
   As far as I can see, mutt follows the example code provided
   by cyrus-sasl closely so if you prefer I can move the
   discussion to the cyrus-sasl list.

--
Kevin J. McCarthy
GPG Fingerprint: 8975 A9B3 3AA3 7910 385C  5308 ADEF 7684 8031 6BDA

I'll take a look at it from my side too, but probably won't have time for a couple days.

signature.asc
Description: PGP signature