Re: [PATCH] Fix IMAP auth_crm MD5 digest of secret to use memcpy().

"Kevin J. McCarthy" <[email protected]>
Newsgroups gmane.mail.mutt.devel
Message-ID <aebcRuj-W8WbVNHJ@qinghai>
On Sun, Apr 19, 2026 at 01:50:51PM +0800, Kevin J. McCarthy wrote:
>For a secret longer that MD5_BLOCK_LEN, an MD5 digest is used
>instead.  However, mutt was incorrectly using strfcpy() on the raw
>binary value returned by md5_buffer, instead of memcpy().  This could
>result in authentication failing.

I've pushed this to stable and merged it into master.

-- 
Kevin J. McCarthy
GPG Fingerprint: 8975 A9B3 3AA3 7910 385C  5308 ADEF 7684 8031 6BDA
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=NzyG
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.