What is the reason that the security-related patches made by Alan Cox in May
were not incorporated into nmh? Are there plans to include them in future
nmh releases?
That patch converted all the sprintf() calls to snprintf() calls.
Although this is generally a good idea, the substitute snprintf()
routine that comes with nmh uses temp files. For machines without
a native snprintf(), the performance is so bad, that nmh becomes
unusable.
I've been looking for a better version of snprintf() to include in
the nmh distribution, but haven't found one yet.
--
Richard Coleman
coleman(_at_)math(_dot_)gatech(_dot_)edu