bugThe nmh Mail Handling System - Bugs: bug #36056, nmh lets binary through to terminal

 
 

bug #36056: nmh lets binary through to terminal

Submitter:  None
Submitted:  Sat 31 Mar 2012 06:50:44 PM UTC
   
 
Category:  Bug Severity:  3 - Normal
Priority:  * 5 - Normal Status:  In Progress
Assigned to:  None Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 04 Nov 2016 07:46:49 PM UTC, comment #3: 

We can't use this patch as-is; sending "binary" to the terminal is completely valid if you have a UTF-8 locale. And changes to the relevant mail standards have made it that bare UTF-8 in headers legal as well (look up the message/global MIME type).

What needs to happen is we need to recognize UTF-8 in headers and don't output those characters if they aren't compatible with the user's locale.

Ken Hornstein <kenh>
Group administrator
Fri 04 Nov 2016 03:45:07 AM UTC, comment #2: 

Wow, is nmh still piping arbitrary binary through to the user's terminal?
Could somebody please at least put in the change to use mh_fputs?  Thanks.

Andrew Valencia <vandys>
Mon 16 Apr 2012 03:17:12 PM UTC, comment #1: 

So that's interesting ... the message was in UTF-8, but didn't have any MIME tagging.  That's mega-bogus (but hey, it's spam, not surprising).  Let me put this to the mailing list.

Ken Hornstein <kenh>
Group administrator
Sat 31 Mar 2012 06:50:44 PM UTC, original submission:  

Got a spam with binary contents in the Subject: line.
Was amazed that nmh piped it right through onto my display.
Messed up my display but didn't do any real harm, but this can NOT be a "good thing".

Local fix here was to change scan() so it used mh_fputs() instead of plain fputs(), and then added a test in mh_fputs() for (ctype.h) isprint(c) || isspace(c).

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #25533:  332 added by None (3KiB - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by vandys (Posted a comment)
  • -email is unavailable- added by kenh (Posted a comment)
  •  

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-04-16 kenh StatusNone In Progress
    2012-03-31 None Attached File- Added 332, #25533

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code