Cyrus IMAPd 2.3.10 Released

Ken Murchison murch at andrew.cmu.edu
Thu Nov 8 06:39:45 EST 2007


Simon Matter wrote:
>> Hi,
>>
>>>>>>> On Sun, 28 Oct 2007 19:42:02 +0100
>>>>>>> Tomas Janousek <tjanouse at redhat.com> said:
>> tjanouse> Looks correct. (will not terminate if it reaches NGROUPS, don't
>> know if that
>> tjanouse> can happen though)
>>
>> Oops, it never happen.
>> It is intended to be safe-keeping for avoiding endless-loop.
>>
>> tjanouse> But as I said earlier, it's probably better to use the old code
>> on non-glibc
>> tjanouse> systems.
>>
>> I'm not sure which one is better.
> 
> The implementation in 2.3.10 also segfaults on Linux systems unpatched
> glibc-2.3.2. From the getgrouplist manpage:
> 
> BUGS
> The glibc 2.3.2 implementation of this function  is  broken:  it 
> overwrites memory when the actual number of groups is larger than
> *ngroups.
> 
> Regards,
> Simon

That's friggin' great!  We can't exactly force people to have a 
particular version of glibc just to run Cyrus 2.3.10.  Either we need to 
come up with something that will run on all systems, or I'll be inclined 
to remove the getgrouplist() code.


-- 
Kenneth Murchison
Systems Programmer
Project Cyrus Developer/Maintainer
Carnegie Mellon University


More information about the Info-cyrus mailing list