[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: master ef14acf: Make nnml handle invalid non-ASCII headers more cons
From: |
Eli Zaretskii |
Subject: |
Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently |
Date: |
Mon, 19 Dec 2022 19:44:02 +0200 |
> From: Florian Weimer <fweimer@redhat.com>
> Cc: larsi@gnus.org, eric@ericabrahamsen.net, emacs-devel@gnu.org,
> ding@gnus.org
> Date: Mon, 19 Dec 2022 18:27:09 +0100
>
> * Eli Zaretskii:
>
> >> As I expected, I could reproduce the issue with new mail. I'm happy to
> >> report that replacing nnml--encode-headers with your new version fixes
> >> the issue.
> >
> > Thanks, so I've now installed this on the emacs-29 branch, for the
> > upcoming Emacs 29.1.
>
> It's a denial-of-service issue, so it should be backported to 28 if
> possible, too.
We don't plan on any more releases from the emacs-28 branch. I guess
distros will do the backporting, though.
> >> I assume that there is some protection in place that tabs are not
> >> possible here?
> >
> > Tabs where, and what kind of protection are we talking about?
>
> The .overview file is in tab-separated-values format, and I think the
> code is supposed to replace tabs with spaces before the lines are
> written. But mail-encode-encoded-word-string/rfc2047-encode-string
> generally does not replace tabs, so your change shouldn't make things
> worse at least.
OK, thanks.
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Florian Weimer, 2022/12/16
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Eli Zaretskii, 2022/12/17
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Florian Weimer, 2022/12/17
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Eric Abrahamsen, 2022/12/19
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Eli Zaretskii, 2022/12/19
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Eric Abrahamsen, 2022/12/19
- Re: master ef14acf: Make nnml handle invalid non-ASCII headers more consistently, Eli Zaretskii, 2022/12/19