bugThe nmh Mail Handling System - Bugs: bug #36056, nmh lets binary through to terminal

 
 

bug #36056: nmh lets binary through to terminal

Submitted by:  None
Submitted on:  Sat Mar 31 18:50:44 2012  
 
Category: BugSeverity: 3 - Normal
Priority: 5 - NormalStatus: In Progress
Assigned to: NoneOpen/Closed: Open

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri Nov 4 19:46:49 2016, comment #3:

We can't use this patch as-is; sending "binary" to the terminal is completely valid if you have a UTF-8 locale. And changes to the relevant mail standards have made it that bare UTF-8 in headers legal as well (look up the message/global MIME type).

What needs to happen is we need to recognize UTF-8 in headers and don't output those characters if they aren't compatible with the user's locale.

Ken Hornstein <kenh>
Project Administrator
Fri Nov 4 03:45:07 2016, comment #2:

Wow, is nmh still piping arbitrary binary through to the user's terminal?
Could somebody please at least put in the change to use mh_fputs? Thanks.

Andrew Valencia <vandys>
Mon Apr 16 15:17:12 2012, comment #1:

So that's interesting ... the message was in UTF-8, but didn't have any MIME tagging. That's mega-bogus (but hey, it's spam, not surprising). Let me put this to the mailing list.

Ken Hornstein <kenh>
Project Administrator
Sat Mar 31 18:50:44 2012, original submission:

Got a spam with binary contents in the Subject: line.
Was amazed that nmh piped it right through onto my display.
Messed up my display but didn't do any real harm, but this can NOT be a "good thing".

Local fix here was to change scan() so it used mh_fputs() instead of plain fputs(), and then added a test in mh_fputs() for (ctype.h) isprint(c) || isspace(c).

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #25533:  332 added by None (3kB - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by vandys (Posted a comment)
  • -unavailable- added by kenh (Posted a comment)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon Apr 16 15:17:12 2012kenhStatusNone=>In Progress
    Sat Mar 31 18:50:44 2012NoneAttached File-=>Added 332, #25533

    Back to the top


    Powered by Savane 3.1-cleanup