An off-by-one overflow occurs in function dkim_sig_getidentity() in file
libopendkim/dkim.c. The function dkim_qp_decode() should be called with
"vallen - 1":
len = dkim_qp_decode(param, val, vallen - 1);
Regards,
Stefan
Received on Mon Mar 15 2010 - 09:58:58 PST