chibenwa commented on PR #3144: URL: https://github.com/apache/james-project/pull/3144#issuecomment-5478654364
> First of all, I'm a big fan of JAMES project. Lol THANKS! > Has this been already a problem previously? We did not encounter this bug of piped APPEND command yet to be honnest. But (as you might have seen) the parsing of potentially long IMAP littleral is a quangmire which do not have any easy solution. Regarding the changeset I do agree with what is done (better cumulation managenebt rather than dropping the full BytBuff + the code extractions. I'll wait for a :green_apple: build. For the context that's some code that had been written in the light of `CVE-2024-37358: Denial of service through the use of IMAP literals`. I wrote that code by hand and did not account for piped litterals so it's very possible that I ended up doing a mistake. I'll wait for a :green_apple: build, let this open for 3 day to let a chance for people in the community to react. Then we will merge this timely. If you want the fix to be backported to `3.9.x` then fill free to open a PR against it: that way you might not need to do a big work to benefit from it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
