emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: master ef14acf: Make nnml handle invalid non-ASCII headers more cons


From: Eli Zaretskii
Subject: Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently
Date: Mon, 19 Dec 2022 19:44:02 +0200

> From: Florian Weimer <fweimer@redhat.com>
> Cc: larsi@gnus.org,  eric@ericabrahamsen.net,  emacs-devel@gnu.org,
>   ding@gnus.org
> Date: Mon, 19 Dec 2022 18:27:09 +0100
> 
> * Eli Zaretskii:
> 
> >> As I expected, I could reproduce the issue with new mail.  I'm happy to
> >> report that replacing nnml--encode-headers with your new version fixes
> >> the issue.
> >
> > Thanks, so I've now installed this on the emacs-29 branch, for the
> > upcoming Emacs 29.1.
> 
> It's a denial-of-service issue, so it should be backported to 28 if
> possible, too.

We don't plan on any more releases from the emacs-28 branch.  I guess
distros will do the backporting, though.

> >> I assume that there is some protection in place that tabs are not
> >> possible here?
> >
> > Tabs where, and what kind of protection are we talking about?
> 
> The .overview file is in tab-separated-values format, and I think the
> code is supposed to replace tabs with spaces before the lines are
> written.  But mail-encode-encoded-word-string/rfc2047-encode-string
> generally does not replace tabs, so your change shouldn't make things
> worse at least.

OK, thanks.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]