Re: [Exim] verify=header_syntax Buffer overflow (CAN-2004-04…

Top Page
Delete this message
Reply to this message
Author: Tony Finch
Date:  
To: Exim-Users (E-mail)
CC: Nico Erfurth, Andreas Metzler
Subject: Re: [Exim] verify=header_syntax Buffer overflow (CAN-2004-0400)
On Thu, 6 May 2004, Philip Hazel wrote:
>
> My suspicion is that Some Other MTA (tm) allows it, just like it allows
> spaces between the name and the colon in alias files.


It's a consequence of the 822 syntax.

optional-field  =       field-name ":" unstructured CRLF


field-name      =       1*ftext


ftext           =       %d33-57 /               ; Any character except
                        %d59-126                ;  controls, SP, and
                                                ;  ":".
obs-optional    =       field-name *WSP ":" unstructured CRLF


--
Tony Finch <dot@???> http://dotat.at/