oss-sec: Re: CVE request: Digest::SHA double free when using load subroutine

[Florian Weimer <fw () deneb enyo de>]

* Kurt Seifried:

> I'm not clear, how would an attacker exploit this? They'd need to be
> able to specify the file that gets hashed, and the file would have to
> be not present and would thus trigger the crash? Are there any real
> world examples of an affected application? (web based?)
My hunch is that this is just a bug, not a security issue.