* Stephen Gran:

> I'm not sure what clamav should do here.  What algorithm do you suggest
> for infinitely recursive scanning without memory exhaustion or other
> physical limits being hit?

MIME has been designed to support one-pass, streaming processing.
Therefore, the only thing you need to store are the multipart boundary
strings.

> We could return OverNesteded.MIME as the virus name, I suppose, but I
> have had plenty of complaints over the years about the various block max
> settings, so I'm not sure this is always the right thing to do either.

A nesting level of a few thousands should stop the DoS attacks, but
never actually arise in practice.  Few other programs would be able to
handle such a message gracefully, anyway.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to