Re: SPF vulnerability

Scott Kitterman <[email protected]> Fri, 20 Mar 2009 8:14:14 -0400
Newsgroups gmane.mail.spam.spf.devel
Message-ID <43791-SnapperMsgD8DB99B6C5E9391B@[75.199.120.246]>
On Fri, 20 Mar 2009 14:12:46 +0530 (IST) karan pott <[email protected]=
o.in> wrote:
>=A0Hi,
>=A0
>=A0We were using libspf2 (1.0.2) in our product for anti-spam
>=A0functionality on windows platform. Now, we want to upgrade to the
>=A0latest version (1.2.9) to get the fixes for the vulnerabilities
>=A0uncovered recently. For this, we are trying to compile the latest
>=A0version for windows , but we see a lot of errors - some data types
>=A0used in spf_dns_windns.c seem to be missing.
>=A0
>Is there any workaround for this to proceed further?
>

I know that 1.2 is not fully backward compatible with 1.0 and one should ex=
pect to have to do some porting work.  I 'm not sure if that's related.=20=
=20

Additionally, none of the developers are Windows users, so it wouldn't supr=
ise me to find that was less well tested and had some things that needed fi=
xing.

Scott K