[Libpst-devel] lzfu_decompress
Nigel Horne
njh at bandsman.co.uk
Wed Apr 26 09:07:27 UTC 2006
Can we trust the rawSize header value? I am finding countless valgrind
errors in base64_encoding of compressed attachments (I mean a lot - has
no-one ever put the code through valgrind?), which point to buffer overflows
which are probably because the rawsize is wrong. It shouldn't be trusted
anyway since the field is from an untrusted source (incoming email).
I can't help but wonder if lzfu_decompress should ignore the RawSize field
and force it in.
-Nigel
More information about the Libpst-devel
mailing list