Re: Using a dsearch lookup to untaint data

Jeremy Harris via Exim-users <[email protected]> Fri, 19 Dec 2025 19:41:01 +0000
Newsgroups gmane.mail.exim.user
Message-ID <[email protected]>
On 2025/12/18 3:15 PM, Johnnie Adams via Exim-users wrote:
> Here's the debug for {${sg {$value}{\.list}{}}}fail}:
> 
> 842757 postfork: delivery-local
> 
> 842757  search_open: dsearch "/opt/lsoft/listserv/home"
> 
> 842757  search_find: file="/opt/lsoft/listserv/home"
> 
> 842757    key="johnnies-test-list-2.list" partial=-1 affix=NULL starflags=0
> opts="ret=key,filter=file"
> 
> 842757  LRU list:
> 
> 842757    5/opt/lsoft/listserv/home
> 
> 842757    End
> 
> 842757  internal_search_find: file="/opt/lsoft/listserv/home"
> 
> 842757    type=dsearch key="johnnies-test-list-2.list" opts="filter=file"
> 
> 842757  file lookup required for johnnies-test-list-2.list
> 
> 842757    in /opt/lsoft/listserv/home
> 
> 842757  creating new cache entry
> 
> 842757  lookup yielded: johnnies-test-list-2.list
> 
> 842757 delivery-local forking for pipe-tpt-cmd

> I don't see a lot of difference in the logging, but I don't know any way to
> make it more verbose.

That looks like you only enabled the "lookup" debug channel.
I'd suggest you add the "expand" channel also.

See the docs chapter on the exim command-line, around the
description of the "-d" option.
-- 
Cheers,
   Jeremy

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/