Hello On Thu, Sep 01, 2005 at 06:20:46PM +0200, Jens Benecke wrote: > Am Donnerstag, 1. September 2005 17:54 schrieb Ola Lundqvist: > > > Hello > > Hello, > > > > If I use INBOX. (with trailing dot) it does not loop and then get > > > killed. Only when using INBOX without the dot. > > > However, using "INBOX." and "" (nothing) does not make any difference > > > in the folder display. In both cases, the folders are all subfolders > > > of INBOX. > > > > That is how it should be. The problem is with courier and not in IMP. I > > think I have a patch that you can apply in courier if you like. > > Yes. Could you also please reassign this bug report to Courier?
I could but it is no use. The upstream author of courier see this as a feature and not a fault. > Nevertheless, I think this is still at least partly an IMP bug. No user > input should allow IMP to enter a state which kills the running apache > process. Fully agree. I'll let this bug still be here. > And this input from the IMP login form is not only non-validated, it also > comes from a not (yet) authenticated user, so *anybody* can make my apache > processes crash using invalid and thus perhaps even create an effective > DoS. Fully agree, if you have that option enabled (not default I think). > Suggestion: limit maximum recursion depth (I guess 5 would be a sane > default) in building the folder tree, and eliminate duplicates before > displaying it. That can be an acceptable thing to do. Regards, // Ola > > -- > Dipl.-Ing. Jens Benecke > http://www.hitchhikers.de - Europas kostenlose Mitfahrzentrale seit 1998 > http://www.rb-hosting.de - Webhosting mit Extras - PHP ab ?9 - SSH ab ?19 > http://www.spamfreemail.de - 100% saubere Postfächer, garantiert! > -- --- Ola Lundqvist systemkonsult --- M Sc in IT Engineering ---- / [EMAIL PROTECTED] Annebergsslingan 37 \ | [EMAIL PROTECTED] 654 65 KARLSTAD | | http://www.opal.dhs.org Mobile: +46 (0)70-332 1551 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --------------------------------------------------------------- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
