diff options
| author | Jeffrey Stedfast <jestedfa@microsoft.com> | 2019-11-14 09:14:19 -0500 |
|---|---|---|
| committer | Jeffrey Stedfast <jestedfa@microsoft.com> | 2019-11-14 09:14:19 -0500 |
| commit | 004af142c2a3c4c4d7c32d76001769be0609e0b1 (patch) | |
| tree | dedd2c7de3e8bdbaa393fa0afa8dc21e307fc836 | |
| parent | b1b7596ee8fbb3ed9b8d435f4c821ac374d9583f (diff) | |
| download | gmime-004af142c2a3c4c4d7c32d76001769be0609e0b1.tar.gz | |
bumped version to 3.2.5
| -rw-r--r-- | NEWS | 17 | ||||
| -rw-r--r-- | configure.ac | 4 |
2 files changed, 19 insertions, 2 deletions
@@ -1,3 +1,20 @@ +### GMime 3.2.5 + +* Modified GMimeParser to prevent stack overflows when parsing deeply nested messages. + + GMimeParser now has a limit on how deep multipart and/or message/rfc822 MIME part + nesting is allowed to go before the parser will take action to prevent a stack + overflow. If the max level is reached at a message/rfc822 part, then that part + will be consumed by the parser as a generic GMimePart rather than a + GMimeMessagePart. Likewise, if the max level is reached at any type of multipart, + then the content of said multipart will be packed into the GMimeMultipart's + preface and not parsed any further. + +* g_mime_multipart_foreach has been rewritten to avoid recursion, thereby avoiding potential + stack overflows. + +* The gmime-port-2-6-to-3-0.sh script has been fixed to use proper sed syntax. + ### GMime 3.2.4 * Replaced calls to g_memmove with memmove. diff --git a/configure.ac b/configure.ac index 204be0af..4c795048 100644 --- a/configure.ac +++ b/configure.ac @@ -12,8 +12,8 @@ AC_PREREQ(2.54) # m4_define([gmime_major_version], [3]) m4_define([gmime_minor_version], [2]) -m4_define([gmime_micro_version], [4]) -m4_define([gmime_interface_age], [3]) +m4_define([gmime_micro_version], [5]) +m4_define([gmime_interface_age], [4]) m4_define([gmime_binary_age], [m4_eval(100 * gmime_minor_version + gmime_micro_version)]) m4_define([gmime_version], |