Openssl Heartbleed

int            
dtls1_process_heartbeat(SSL *s)
    {          
    unsigned char *p =   &s->s3->rrec.data[0], *pl;
    unsigned short hbtype;
    unsigned int payload;
    unsigned int padding = 16; /* Use   minimum padding */

typedef struct ssl3_record_st
    {
        int type;                 /* type of record */
        unsigned int length;    /* How many bytes available */
        unsigned int off;       /* read/write offset into   'buf' */
        unsigned char *data;    /* pointer to the record data */
        unsigned char *input;   /* where the decode bytes are */
        unsigned char *comp;    /* only used with decompression -   malloc()ed */
        unsigned long epoch;    /* epoch number, needed by DTLS1 */
        unsigned char seq_num[8]; /* sequence number, needed by DTLS1 */
    } SSL3_RECORD;

/* Read type and payload length first */
hbtype = *p++;
n2s(p, payload);
pl = p;

unsigned char *buffer, *bp;
int r;
 
/* Allocate memory for the response, size is 1 byte
 * message type, plus 2 bytes payload length, plus
 * payload, plus padding
 */
buffer = OPENSSL_malloc(1 + 2 + payload + padding);
bp = buffer;

/* Enter response type, length and copy payload */
*bp++ = TLS1_HB_RESPONSE;
s2n(payload, bp);
memcpy(bp, pl, payload);