Tor: libevent (stack) buffer overflow in evutil_parse_sockaddr_port

in evutil.c: c 1798 char buf128; ... ... 1809 cp = strchripasstring, ':'; 1810 if ipasstring == '' 1811 int len; 1812 if !cp = strchripasstring, '' 1813 return -1; 1814 1815 len = int cp-ipasstring + 1 ; 1816 if len intsizeofbuf-1 1817 return -1; 1818 1819 memcpybuf, ipasstring+1, len; Length...