Re: Managing exploits

Mark C. Langston wrote:

> Please correct me if I'm wrong, but it sounds like you're dancing around
> the issue of input validation, to ensure no unexpected data is processed
> by the application (and to avoid such things as buffer overflows, etc.).
Would be nice if Microsoft fixed the buffer overflow bug in their DNSAPI.DLL
that the Windows implementations of SPF are using.

(There is a buffer overrun in DNSAPI.DLL when it encounteres an empty
substring in a TXT record or in a domain name).

Roger