[exim-dev] [Bug 2465] New: 4.93rc1: dsearch lookup Taint mis…

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 2465] New: 4.93rc1: dsearch lookup Taint mismatch
https://bugs.exim.org/show_bug.cgi?id=2465

            Bug ID: 2465
           Summary: 4.93rc1: dsearch lookup  Taint mismatch
           Product: Exim
           Version: N/A
          Hardware: x86
               URL: https://bugs.debian.org/944199
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: String expansion
          Assignee: unallocated@???
          Reporter: eximusers@???
                CC: exim-dev@???


Hello,

this was originally found/reported by Benedikt Spranger:

-----------
Using a virtual domain config as described in the current exim manual
https://www.exim.org/exim-html-current/doc/html/spec_html/ch-some_common_configuration_settings.html#SECTvirtualdomains

renders exim4 unusable.

Config files:
# ls /etc/exim4/virtual
example.com
#

Config snippet:
virtual:
driver = redirect
domains = dsearch;/etc/mail/virtual
data = ${lookup{$local_part}lsearch{/etc/mail/virtual/$domain}}
no_more

Error (paniclog):
2019-11-05 17:27:01 1iRbGs-0000X0-9x Taint mismatch, string_vformat:
dsearch_find 87
2019-11-05 17:27:50 Taint mismatch, string_vformat: dsearch_find 87
-----------

I can confirm the issue on Debian/unstable amd64.

--
You are receiving this mail because:
You are on the CC list for the bug.