MFH: r410731
security/libotr: Update to 4.1.1 Changes: * Fix an integer overflow bug that can cause a heap buffer overflow (and from there remote code execution) on 64-bit platforms * Fix possible free() of an uninitialized pointer * Be stricter about parsing v3 fragments * Add a testsuite ("make check" to run it), but only on Linux for now, since it uses Linux-specific features such as epoll * Fix a memory leak when reading a malformed instance tag file * Protocol documentation clarifications Security: CVE-2016-2851 Approved by: ports-secteam (with hat)
Please register or sign in to comment