From nobody Sun Dec 1 20:47:45 2024 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Y1fB96MLmz5g8vF for ; Sun, 01 Dec 2024 20:47:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Y1fB95LVHz4JWc for ; Sun, 1 Dec 2024 20:47:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1733086065; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ThQAkUu4SynJ2GZ5JoFWA2Ugg1wbDGnggCjYWpGkFHs=; b=U1SAfLZc+cgHIAJs3ijHB8SVvpxdCVil7bHT7RWRfMsEmAXfyEFufo89+ujN2f3KKi4R9d Trk1hfMooYbszK6pzy8Y3uDQTY74DecCbiaF9siMsUuOUZWbeNYDy950IKZv9cfoswu9yO ETZOfF/FuoCrZnRi9wFeN1yad2ja/VImO38vz/tf6mcJie3F6VPcB6S7tlk4dbsAbvBPJD tMwLjsEYIM6eWEEsvPKt1pTvHwtistdd0OppAK2/YU/ya/k1xV0ZyhoYMY3CMvSUdZtxDk 9ogJlQXjOWFa2tXLTqEHPRkHhunCeHf2BrBoFX9pp1D6HJ9fNBuqO63QHyOtcA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1733086065; a=rsa-sha256; cv=none; b=wOITpfuWBDXMjWK5FDMcZpILK0RoFTLufr9cg1HCYQ+8k6JARXvNQrDR0SwG7UW9EQ90XK ghPA/V01h7PWpgOExYrFFGToHYwijTZAvL68C8V032aGs51KRd19/oFeM+tFXFe/qLSiIo gLC7pPpjEl+9jZHRE6PfoEwojlDCYvp+zg4fBnVgOCqEjMg+EpwJ5D7UttdDYhTkh0edHF yyMiCqfOvQVu0QzaellekGxugOFNON8veKSpdoZr2CPgUstCJLMaYQbjBAORfpYeDJl2V8 Jhr3LgRwFIWQegWkrvjRAJvuPBHX8AxsboJ+Y3KkJAJREMEmB7HjU9+oII2RBw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Y1fB94rdBz17wx for ; Sun, 1 Dec 2024 20:47:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 4B1KljpD055278 for ; Sun, 1 Dec 2024 20:47:45 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 4B1Klji8055277 for bugs@FreeBSD.org; Sun, 1 Dec 2024 20:47:45 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 270404] comsat is willing to try to read and display any file Date: Sun, 01 Dec 2024 20:47:45 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: Unspecified X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: emaste@freebsd.org X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D270404 Ed Maste changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Open |In Progress --- Comment #6 from Ed Maste --- We should probably use NetBSD's approach - ignore the path in a comsat mess= age, unless it is the system path. commit 4c4a0e2830a28ffdc555143b8ea45f2b70397aa4 Author: atatat Date: Fri Mar 16 21:39:08 2001 +0000 Use strtol() instead of atoi() for reading the number out of the datagram that we received, which leads to easier support for (ignoring) the procmail messages that specify the folder to which the message was delivered. When reading the mailbox, if we encounter a "From " line, we should exit(). This can occur if there are a lot of rapidly arriving, yet short messages. Comment from NetBSD comsat.c: /* * Procmail sends messages to comsat with a trailing colon * and a pathname to the folder where the new message was * deposited. Since we can't reliably open only regular * files, we need to ignore these. With one exception: * if it mentions the user's system mailbox. */ --=20 You are receiving this mail because: You are the assignee for the bug.=