Jérémie Courrèges-Anglas writes: > Hi (again), > > I have a lightly tested netpgp port in mystuff/. Has any of you already > worked on this? I was going to ask upstream if they were going to > upload a new tarball (20101107 right now).
There is one in the openbsd-wip git repo, mostly from Pascal Stumpf: https://github.com/jasperla/openbsd-wip/tree/master/security/netpgp NetPGP is based on a pretty old codebase. I found and fixed a few double frees and buffer overruns; the fixes are now upstream (and in the above port). I haven't tried NetPGP for a while, but I seem to recall some crashes that I encountered but never fixed. I recommend *heavy* testing with strict malloc options before it gets committed. -- Anthony J. Bentley
