Re: Balsa 1.1.7 having trouble w/ mbox parsing?

[Brian Stafford <brian stafford uklinux net>]

On Mon, 16 July 17:17 Carlos Morgado wrote:
> On 2001.07.16 16:39:33 +0100 Brian Stafford wrote:
> 
> > A solution that would be better suited to in-core parsing would be to
> > maintain
> > a stack of MIME boundary strings and check that every time a MIME boundary
> > is detected.  As the code works its way up the stack, terminate the parts
> > that haven't matched.  Just to be complicated, if none of the stacked
> > boundaries match the string that looked like a MIME boundary, then it was
> > not actually a boundary after all and the correct action is to continue to
> > collect data for the current part.  Needless to say, this is tricky to code.
> > 
> 
> and might i add, it's rather prone *remote exploits* by malicious malformated
> mime messages

Yup!

I've had a few goes at writing a streaming MIME decoder in the past and
gave up on each occasion when I contemplated how much easier the "decode
to a file and then decode that" approach is.

Brian