Re: heap overflow in procmail

[Tavis Ormandy <taviso () cmpxchg8b com>]

Rich Felker <dalias () libc org> wrote:
> Unless I'm misunderstanding your report, the problem is in the formail
> utility which comes with procmail, not procmail itself. This should be
> clarified in the title of the vuln, perhaps as "heap overflow in
> procmail's formail utility" rather than "heap overflow in procmail".
>
> Rich

I'm not sure what "title" you mean, are you referring to my email subject?
If you are, I think "<problem> in <package>" is pretty reasonable, but
perhaps this is subjective (hah!).

Tavis.