Re: heap overflow in procmail

[Jakub Wilk <jwilk () jwilk net>]

* Tavis Ormandy <taviso () google com>, 2014-09-03, 11:52:
> I noticed a heap overflow in procmail when parsing addresses with 
> unbalanced quotes.

Unfortunately, there's more:
https://bugs.debian.org/769937

Apparently procmail upstream is inactive; and nobody understands how 
this code works.

At this point, I'd recommend that formail users switch to reformail[0], 
which is mostly (but not completely) compatible with formail.

[0] http://www.courier-mta.org/reformail.html

--
Jakub Wilk