On 9/20/21 1:13 AM, Theo de Raadt wrote:
Christian Weisgerber <na...@mips.inka.de> wrote:

This includes the list of remaining ports with %n warnings:

mail/exim
net/climm

two left.

here is my brutish attempt to deal with exim, which has a set of
*printf-like functions which return pointer, and but discard the
length

in a few cases, %n is at the end, allowing use of strlen() to
recover the discarded length

in other cases, %n is embedded, and the operation must be split up.

I am unable (and unwilling) to run this in test.  Is there anyone who
can take this on?


I am currently testing it on my small home prod server on 6.9.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to