Re: [PATCH] Change Message-ID generation to be more unique and leak less information

[Kevin J. McCarthy]

On Wed, Apr 22, 2020 at 09:05:28PM -0400, re...@webconquest.com wrote:

On Mon, Apr 20, 2020 at 11:18:55AM +0200, Oswald wrote in

you're leaking the random strings. i suggest passing in fixed-size buffers instead.

I am not sure I understand how the random strings are being leaked, and I'd like to understand. Can you clarify this to me and explain how this would be a concern?

--
Kevin J. McCarthy
GPG Fingerprint: 8975 A9B3 3AA3 7910 385C  5308 ADEF 7684 8031 6BDA

The memory allocated and returned by mutt_gen_base64_enc_rand() is being leaked.

signature.asc
Description: PGP signature