[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#136093: What's the status of this uudeview bufer overflow bug?



On 2010-05-08 Francesco Poli <frx@firenze.linux.it> wrote:
> Hi,
> I would like to learn the status of this bug.

> Is it fixed?
> Or is it still present?

> Could you please clarify?

Well, 0.5.20 seems to behave exactly as reported. If the To: field reaches
1024 bytes parsing fails (without a crash).

Example attached.

$ wc -L longline.mbox
1023 longline.mbox
$ uudeview longline.mbox
Note: No encoded data found in longline.mbox
# Shorten From by one character
$ sed -i -e 's/11/1/' longline.mbox
$ wc -L longline.mbox
1022 longline.mbox
$ uudeview longline.mbox
Loaded from longline.mbox: 'using -b option (001/001) - [ example.file_-b_encoded ]' (example.file_-b_encoded): example.file_-b_encoded part 1   Base64

Found 'example.file_-b_encoded' State 16 Base64 Parts 1 OK

  -rw-r--r-- example.file_-b_encoded is OK   [d] (?=help)


cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'

Attachment: longline.mbox.gz
Description: application/gzip


Reply to: