Freaky, Security fixes for Exim are out. Here's one for an out-of-bounds write in its external authenticator code:
- auth_vars[expand_nmax] = s;
- auth_vars[expand_nmax = 1] = s;
Which certainly doesn't look like an error-prone way of resetting how many numbered strings you've expanded.
Incidentally, two of these three variables are globals. That's not particularly surprising since Exim has well over 700 of them.
Anyway, I'm sure nothing like this will happen again now these are fixed.
Add comment