Tor: Heap corruption via memarea.c

Hello again, There is a potential vulnerability in memarea.c. common/memarea.c: c 230 void 231 memareaallocmemareat area, sizet sz 232 233 memareachunkt chunk = area-first; 234 char result; 235 torassertchunk; 236 CHECKSENTINELchunk; 237 torassertsz nextmem+sz chunk-UMEM+chunk-memsize The...