Re: [exim] Taint mismatch in exim 4.93.0.4

Top Page
Delete this message
Reply to this message
Author: Heiko Schlichting
Date:  
To: exim-users
CC: Jeremy Harris
Subject: Re: [exim] Taint mismatch in exim 4.93.0.4
> > > after upgrading to exim 4.93.0.4 it complains about
> > >
> > >     2020-02-24 11:08:47 1j6AfP-002SAT-9R Taint mismatch, string_vformat: spam 404

> > >
> > > in SMTP DATA ACL. The config looks like this:
> > >
> > >     deny     message     = This message was classified as SPAM
> > >              spam        = nobody/defer_ok

> > >
> > > The message is temporarily rejected. Any idea?
> >
> > As far as I can see, that's a "shouldn't happen"; both of the
> > relevant args going to string_vformat() from there should be
> > untainted.
> >
> > If you can build from source, could you try the current git master?
> > There have been fixes in taint-detection since the version
> > you are running.
>
> Same problem using git master (c1cea16).


Sorry, my mistake.

Seems that one of our local extensions causes the problem. Please ignore my
report. I'll investigate the code first.

Sorry,
Heiko

Heiko Schlichting                Freie Universität Berlin
heiko.schlichting@???   Zentraleinrichtung für Datenverarbeitung
Telefon +49 30 838-54327         Fabeckstraße 32
Telefax +49 30 838454327         14195 Berlin