re: #16 dog philosopher
is there a detailed description of the particular place where they failed to check a low end or high end boundary value?
Indeed there is:
A Few Thoughts on Cryptographic Engineering: Attack of the Week: OpenSSL Heartbleed