Re: [Fwd: BoS: Vulnerability in Majordomo]

[Dave Wolfe <dwolfe @ risc . sps . mot . com>]

[ Russ Allbery writes: ]
> 
> Okay.  In that case, I think the most obvious patch to the current
> behavior is:
> 
[deleted]
> 
> This has the advantage of being nigh-minimal impact and should, as far as
> I can tell, resolve the security problem entirely.

But still diddles the return address, possibly invalidating a perfectly
valid address. Be patient. I'm testing a very simple fix that I think
has no impact except to remove the vulnerability.

-- 
 Dave Wolfe