Re: Fwd: report 2/3: unsafe handling of excessive IMAP message counts
"Kevin J. McCarthy" <[email protected]> Thu, 18 Jun 2026 15:32:38 +0800
| Newsgroups | gmane.mail.mutt.devel |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Jun 18, 2026 at 07:34:01AM +0200, Rene Kita wrote: >I think the important part in the original message is: >| A malicious IMAP server sends a large message count that > >Exiting is totally fine when we detect we talk to a malicious server. >But the error message is not good. What is the overflow? Where is it >coming from? The message should give the user a hint that the server is >reporting a unplausible message count. That's good feedback. I'll take a look at improving the error message after the release. Thank you! -- Kevin J. McCarthy GPG Fingerprint: 8975 A9B3 3AA3 7910 385C 5308 ADEF 7684 8031 6BDA
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEiXWpszqjeRA4XFMIre92hIAxa9oFAmoznxYACgkQre92hIAx a9rQYRAA6KS/djX+nmTRf5JYBRY0GUTO5rKomw+eiwkEQFsLlvCE/OuvFQyIBSgV eTS1QyOLzPTnon0B+sehsVQRZNH2yXCV1m4H45GK30vni5FVGhBob8Oh7aTjIHxa Bpr+jJEHH1oypnC26ywTdJALwDL36wrs+jMe4coEKUIzZklC1m+oSdwBAl30wBhf ZhgQH/ybtiTe8Gs1KzmgI0Mp9Yug3Yz4puQhx+hnKVgVwW9pRtthREK0TE2/5LBN 1FuBTi4VC3h4R5eXa/pqPsYQL9NrCipjHL+0VkPbaXquZ8kZZgL+Y16ZNuzrM5Rx XpieAO0+SLQ/z5QXq9NuuAYCiHk1cjy++/WZjPmuHNMKWqFsNKxgf+tEHWYBThTY 0aAf4cH2NPRMRPfa6UeOpOeQ3Di1Jc3ghglmdC/zGeNOq67VpBwdtAUP7aoVNvBd 1LKMM5rGCMv7uK+xKJPQ31Hgj3PjjKiItTQYRtxj6ypPu8QB2IUBz0/MbyDazWLZ cSKFFQpkrFXl7/GgVfIni7IGakAYeohqQ4U3fn0brlDwGcX7qrP0E9tgLzygRV32 O92zyfSpZIDb08fV9e9QjMeVPZIGsQ6IOheu7JgVbLknU8w1ym3wwzprFAjmk5cv VWrFZZFfjoOOEHUIvWKwr6pgFLa3z7dC5ziAVAI8WXfDJFj/AAg= =P89q -----END PGP SIGNATURE-----