Re: [exim] Exim 4.94 PAM SMTP auth - Taint

On 02/06/2020 13:16, Patrick Boutilier via Exim-users wrote:
> On 6/2/20 8:58 AM, Jeremy Harris via Exim-users wrote:
>> On 02/06/2020 02:06, Patrick Boutilier via Exim-users wrote:
>>> 2020-06-01 21:35:52 Taint mismatch, string_nextinlist: auth_call_pam 158
>>
>> Thanks for the report.  Is this a self-build, or from a distro?
>> Either way, feels like a bug.  If you can build yourself then
>> a possible fix can be tested quickly.
>>
>
> Self build from source.

In src/auths/call_pam.c at about line 158,
replace "big_buffer" with "NULL" and "big_buffer_size" with "0".

--
Cheers,
Jeremy