Comment by NelsonMinar
12 years ago
I'm very curious to see the change that introduced the bug in the first place. According to the announcement it was introduced in 1.0.1. That's the version that added Heartbeat support, so maybe it was a bug from the beginning.
Yes, this has been introduced in the original heartbeat extension commit (01-01-2012):
http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bd69...