[Dovecot] Concerned about Dovecot's new NTLM code
Timo Sirainen
tss at iki.fi
Mon Sep 27 15:49:14 EEST 2004
On 27.9.2004, at 10:33, Andrew Bartlett wrote:
>>> - NTLMSSP is NDR, not 'C struct pushed to the wire', it needs to be
>>> correctly marshaled and unmarshaled.
>>
>> Yes, it's not a C struct, so what ? Where is the actual bug ?
>
> In my reading of the code, it appeared not to cope with the multiple
> forms that NTLMSSP can take,
I don't know about that, but
> and in particular the Dovecot code seemed
> to perform some of the conversions by cast.
Where? To me it looks like it uses marshaling/unmarshaling everywhere.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
URL: <http://dovecot.org/pipermail/dovecot/attachments/20040927/2ce5195d/attachment-0001.bin>
More information about the dovecot
mailing list