Tom Kistner wrote: > The bug is in handling the name of the DB file, not the data which gets > into the file.
This is a bonus, but I'm sure I'm not the only one with files named by what could in theory ultimately be user data (e.g. domain) e.g. /path/to/virtual_aliases/example.com where the data in those files might be eligible for dbmbuild'ing. I suspect there are probably at least some "control-panel" apps that do something like this whilst allowing users to set up their own virtual domains. To be fair, in that case there are probably bigger issues than this if you are allowing arbitrary user input to be used in the naming of files on your FS (let's hope you're whitelist-filtering your data and careful what privileges scripts have if you're doing this :), but still. Tim -- ## List details at http://www.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
