On 1998/07/05, Richard Coleman wrote:
What is the reason that the security-related patches made by Alan Cox in Ma
y
were not incorporated into nmh? Are there plans to include them in future
nmh releases?
That patch converted all the sprintf() calls to snprintf() calls.
Although this is generally a good idea, the substitute snprintf()
routine that comes with nmh uses temp files. For machines without
a native snprintf(), the performance is so bad, that nmh becomes
unusable.
I've been looking for a better version of snprintf() to include in
the nmh distribution, but haven't found one yet.
First of all, thanks for your quick reply.
The Apache webserver contains an implementation of snprintf that doesn't
use temporary files. I don't know if the Apache and nmh licenses permit
you to use it, though. At first glance, there seem to be no conflicts,
except for maybe the "advertising clause".
If you want, I can mail you a copy of the source file.
Hope this helps,
Ruud de Rooij.
--
Ruud de Rooij
r(_dot_)c(_dot_)m(_dot_)derooij(_at_)twi(_dot_)tudelft(_dot_)nl
http://sepc.twi.tudelft.nl/~derooij/