2
0
mirror of https://github.com/vdukhovni/postfix synced 2025-09-01 14:45:32 +00:00

postfix-2.11-20131103

This commit is contained in:
Wietse Venema
2013-11-03 00:00:00 -05:00
committed by Viktor Dukhovni
parent 4920c6b506
commit 78fe66320c
25 changed files with 286 additions and 251 deletions

View File

@@ -19034,3 +19034,20 @@ Apologies for any names omitted.
Documentation: added SASL_README example for check_sasl_access.
File: proto/SASL_README.html.
20131102
Security violation: by default, LMDB 0.9.9 writes fragments
of uninitialized heap memory to a world-readable database
file. This is a basic memory disclosure vulnerability:
memory content that a program does not intend to share ends
up in a world-readable file. The content of uninitialized
heap memory depends on program execution history. That
history includes code execution in other libraries that are
linked into the program. To work around this problem we
disable the use of malloc() in LMDB. However, that does not
address several disclosures of stack memory. File:
util/dict_lmdb.c.
Cleanup: expand TAB characters when generating HTML and
README files. Files: proto/Makefile.in.

View File

@@ -15,8 +15,6 @@ Wish list:
Things to do after the stable release:
Why does postlink no longer hyperlink static:all?
Begin code revision, after DANE support stabilizes. This
should be one pass that changes only names and no code.

View File

@@ -434,7 +434,7 @@ from remote SMTP clients only if the client matches the
<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> parameter, or if the
<a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a> configuration parameter specifies a
non-empty value. To get the behavior before Postfix 2.2, specify
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = static:all". </p> </dd>
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = <a href="DATABASE_README.html#types">static</a>:all". </p> </dd>
<dt>Rewrite "site!user" to "user@site" </dt>
@@ -448,7 +448,7 @@ from remote SMTP clients only if the client matches the
<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> parameter, or if the
<a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a> configuration parameter specifies a
non-empty value. To get the behavior before Postfix 2.2, specify
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = static:all". </p> </dd>
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = <a href="DATABASE_README.html#types">static</a>:all". </p> </dd>
<dt>Rewrite "user%domain" to "user@domain"</dt>
@@ -461,7 +461,7 @@ from remote SMTP clients only if the client matches the
<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> parameter, or if the
<a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a> configuration parameter specifies a
non-empty value. To get the behavior before Postfix 2.2, specify
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = static:all". </p> </dd>
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = <a href="DATABASE_README.html#types">static</a>:all". </p> </dd>
<dt>
@@ -478,7 +478,7 @@ from remote SMTP clients only if the client matches the
domain name specified with the <a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a>
configuration parameter, if one is specified. To get the behavior
before Postfix 2.2, specify "<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> =
static:all". </p>
<a href="DATABASE_README.html#types">static</a>:all". </p>
<p> If your machine is not the main machine for $<a href="postconf.5.html#myorigin">myorigin</a> and you
wish to have some users delivered locally without going via that
@@ -502,7 +502,7 @@ from remote SMTP clients only if the client matches the
domain name specified with the <a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a>
configuration parameter, if one is specified. To get the behavior
before Postfix 2.2, specify "<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> =
static:all". </p>
<a href="DATABASE_README.html#types">static</a>:all". </p>
<p> Some will argue that rewriting "host" to "host.domain"
is bad. That is why it can be turned off. Others like the convenience
@@ -519,7 +519,7 @@ from remote SMTP clients only if the client matches the
<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> parameter, or if the
<a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a> configuration parameter specifies a
non-empty value. To get the behavior before Postfix 2.2, specify
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = static:all". </p> </dd>
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = <a href="DATABASE_README.html#types">static</a>:all". </p> </dd>
</dl>
@@ -537,7 +537,7 @@ from remote SMTP clients only if the client matches the
<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> parameter, or if the
<a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a> configuration parameter specifies a
non-empty value. To get the behavior before Postfix 2.2, specify
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = static:all". </p>
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = <a href="DATABASE_README.html#types">static</a>:all". </p>
<p> Address rewriting is
done for local and remote addresses. The mapping is useful to
@@ -621,7 +621,7 @@ from remote SMTP clients only if the client matches the
<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> parameter, or if the
<a href="postconf.5.html#remote_header_rewrite_domain">remote_header_rewrite_domain</a> configuration parameter specifies a
non-empty value. To get the behavior before Postfix 2.2, specify
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = static:all". </p>
"<a href="postconf.5.html#local_header_rewrite_clients">local_header_rewrite_clients</a> = <a href="DATABASE_README.html#types">static</a>:all". </p>
<p> Address masquerading is disabled by default, and is implemented
by the <a href="cleanup.8.html">cleanup(8)</a> server. To enable, edit the <a href="postconf.5.html#masquerade_domains">masquerade_domains</a>

View File

@@ -95,6 +95,7 @@ MAN = ../man/man5/postconf.5
AWK = awk '{ print; if (NR == 1) print ".pl 9999\n.ll 65" }'
SRCTOMAN= ../mantools/srctoman
POSTLINK= ../mantools/postlink
DETAB = pr -tre
HT2READ = ../mantools/html2readme
MAKEAAA = ../mantools/makereadme
MAKESOHO= ../mantools/make_soho_readme
@@ -138,341 +139,341 @@ clobber:
$(SRCTOMAN) - $? | $(AWK) | nroff -man | col -bx | uniq | sed 's/^/# /' >$@
../html/ADDRESS_CLASS_README.html: ADDRESS_CLASS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/ADDRESS_REWRITING_README.html: ADDRESS_REWRITING_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/ADDRESS_VERIFICATION_README.html: ADDRESS_VERIFICATION_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/BACKSCATTER_README.html: BACKSCATTER_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/CDB_README.html: CDB_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/CONNECTION_CACHE_README.html: CONNECTION_CACHE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/CONTENT_INSPECTION_README.html: CONTENT_INSPECTION_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/CYRUS_README.html: CYRUS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/BASIC_CONFIGURATION_README.html: BASIC_CONFIGURATION_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/BUILTIN_FILTER_README.html: BUILTIN_FILTER_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/DATABASE_README.html: DATABASE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/DB_README.html: DB_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/DEBUG_README.html: DEBUG_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/DSN_README.html: DSN_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/ETRN_README.html: ETRN_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/FILTER_README.html: FILTER_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/INSTALL.html: INSTALL.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/IPV6_README.html: IPV6_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/LDAP_README.html: LDAP_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/LINUX_README.html: LINUX_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/LOCAL_RECIPIENT_README.html: LOCAL_RECIPIENT_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/MAILDROP_README.html: MAILDROP_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/LMDB_README.html: LMDB_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/MEMCACHE_README.html: MEMCACHE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/MILTER_README.html: MILTER_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/MULTI_INSTANCE_README.html: MULTI_INSTANCE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/MYSQL_README.html: MYSQL_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/NFS_README.html: NFS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/OVERVIEW.html: OVERVIEW.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/PACKAGE_README.html: PACKAGE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/PCRE_README.html: PCRE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/PGSQL_README.html: PGSQL_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/POSTSCREEN_README.html: POSTSCREEN_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/QMQP_README.html: QMQP_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/QSHAPE_README.html: QSHAPE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/RESTRICTION_CLASS_README.html: RESTRICTION_CLASS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/SASL_README.html: SASL_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/SCHEDULER_README.html: SCHEDULER_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/SMTPD_ACCESS_README.html: SMTPD_ACCESS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/SMTPD_POLICY_README.html: SMTPD_POLICY_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/SMTPD_PROXY_README.html: SMTPD_PROXY_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/SOHO_README.html: $(MAKESOHO) $(DEPSOHO)
$(MAKESOHO) | $(POSTLINK) >$@
$(MAKESOHO) | $(POSTLINK) | $(DETAB) >$@
../html/SQLITE_README.html: SQLITE_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/STANDARD_CONFIGURATION_README.html: STANDARD_CONFIGURATION_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/STRESS_README.html: STRESS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/TUNING_README.html: TUNING_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/UUCP_README.html: UUCP_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/ULTRIX_README.html: ULTRIX_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/VERP_README.html: VERP_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/VIRTUAL_README.html: VIRTUAL_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/XCLIENT_README.html: XCLIENT_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/XFORWARD_README.html: XFORWARD_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/TLS_README.html: TLS_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../html/TLS_LEGACY_README.html: TLS_LEGACY_README.html
$(POSTLINK) $? >$@
$(POSTLINK) $? | $(DETAB) >$@
../README_FILES/ADDRESS_CLASS_README: ADDRESS_CLASS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/ADDRESS_REWRITING_README: ADDRESS_REWRITING_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/ADDRESS_VERIFICATION_README: ADDRESS_VERIFICATION_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/BACKSCATTER_README: BACKSCATTER_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/BASIC_CONFIGURATION_README: BASIC_CONFIGURATION_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/BUILTIN_FILTER_README: BUILTIN_FILTER_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/CDB_README: CDB_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/CONNECTION_CACHE_README: CONNECTION_CACHE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/CONTENT_INSPECTION_README: CONTENT_INSPECTION_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/CYRUS_README: CYRUS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/DATABASE_README: DATABASE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/DB_README: DB_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/DEBUG_README: DEBUG_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/DSN_README: DSN_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/ETRN_README: ETRN_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/FILTER_README: FILTER_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/INSTALL: INSTALL.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/IPV6_README: IPV6_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/LDAP_README: LDAP_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/LINUX_README: LINUX_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/LOCAL_RECIPIENT_README: LOCAL_RECIPIENT_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/MAILDROP_README: MAILDROP_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/LMDB_README: LMDB_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/MEMCACHE_README: MEMCACHE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/MILTER_README: MILTER_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/MULTI_INSTANCE_README: MULTI_INSTANCE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/MYSQL_README: MYSQL_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/NFS_README: NFS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/OVERVIEW: OVERVIEW.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/PACKAGE_README: PACKAGE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/PCRE_README: PCRE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/PGSQL_README: PGSQL_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/POSTSCREEN_README: POSTSCREEN_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/QMQP_README: QMQP_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/QSHAPE_README: QSHAPE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/RESTRICTION_CLASS_README: RESTRICTION_CLASS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/SASL_README: SASL_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/SCHEDULER_README: SCHEDULER_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/SMTPD_ACCESS_README: SMTPD_ACCESS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/SMTPD_POLICY_README: SMTPD_POLICY_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/SMTPD_PROXY_README: SMTPD_PROXY_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/SOHO_README: $(MAKESOHO) $(DEPSOHO)
$(MAKESOHO) | $(HT2READ) >$@
$(MAKESOHO) | $(HT2READ) | $(DETAB) >$@
../README_FILES/SQLITE_README: SQLITE_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/STANDARD_CONFIGURATION_README: STANDARD_CONFIGURATION_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/STRESS_README: STRESS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/TUNING_README: TUNING_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/UUCP_README: UUCP_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/ULTRIX_README: ULTRIX_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/VERP_README: VERP_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/VIRTUAL_README: VIRTUAL_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/XCLIENT_README: XCLIENT_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/XFORWARD_README: XFORWARD_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/TLS_README: TLS_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/TLS_LEGACY_README: TLS_LEGACY_README.html
$(HT2READ) $? >$@
$(HT2READ) $? | $(DETAB) >$@
../README_FILES/AAAREADME: ../html/index.html $(MAKEAAA)
$(MAKEAAA) ../html/index.html | $(HT2READ) >$@
$(MAKEAAA) ../html/index.html | $(HT2READ) | $(DETAB) >$@
../man/man5/postconf.5: postconf.man.prolog postconf.proto postconf.man.epilog \
../mantools/xpostconf ../mantools/postconf2html ../mantools/postconf2man
(cat postconf.man.prolog; ../mantools/xpostconf postconf.proto | \
../mantools/postconf2html | ../mantools/postconf2man | \
sed 's/\\e&/\\\&/'; cat postconf.man.epilog ) > $@
sed 's/\\e&/\\\&/'; cat postconf.man.epilog ) | $(DETAB) > $@
../html/postconf.5.html: postconf.html.prolog postconf.proto \
postconf.html.epilog ../mantools/xpostconf ../mantools/postconf2html \
../mantools/postlink
(cat postconf.html.prolog; ../mantools/xpostconf postconf.proto | \
../mantools/postconf2html | ../mantools/postlink; \
cat postconf.html.epilog ) > $@
cat postconf.html.epilog ) | $(DETAB) > $@

View File

@@ -20,7 +20,7 @@
* Patches change both the patchlevel and the release date. Snapshots have no
* patchlevel; they change the release date only.
*/
#define MAIL_RELEASE_DATE "20131102"
#define MAIL_RELEASE_DATE "20131103"
#define MAIL_VERSION_NUMBER "2.11"
#ifdef SNAPSHOT

View File

@@ -551,12 +551,31 @@ DICT *dict_lmdb_open(const char *path, int open_flags, int dict_flags)
mdb_path = concatenate(path, "." DICT_TYPE_LMDB, (char *) 0);
/*
* Impedance adapters.
* Security violation.
*
* By default, LMDB 0.9.9 writes uninitialized heap memory to a
* world-readable database file. This is a basic memory disclosure
* vulnerability: memory content that a program does not intend to share
* ends up in a world-readable file. The content of uninitialized heap
* memory depends on program execution history. That history includes
* code execution in other libraries that are linked into the program.
*
* As a workaround we turn on MDB_WRITEMAP which disables the use of
* malloc() in LMDB. However, that does not address several disclosures
* of stack memory.
*/
mdb_flags = MDB_NOSUBDIR | MDB_NOLOCK;
if (open_flags == O_RDONLY)
mdb_flags |= MDB_RDONLY;
/*
* Replace with MDB_VERSION_FULL < MDB_VERINT(X, Y, Z) after this is
* fixed up-stream.
*/
#if 1
mdb_flags |= MDB_WRITEMAP;
#endif
slmdb_flags = 0;
if (dict_flags & DICT_FLAG_BULK_UPDATE)
slmdb_flags |= SLMDB_FLAG_BULK;