Re: a DoS vulnerability associated with conflated Message-IDs?

2017-08-04 Thread Daniel Kahn Gillmor
On Fri 2017-08-04 16:42:54 -0400, David Bremner wrote: > Peter Wang writes: > >> On Thu, 08 Mar 2012 11:37:09 -0500, Daniel Kahn Gillmor >> wrote: >>> notmuch currently treats all messages with the same Message-ID as >>> the same message. I think this could be a vulnerability :( >>> >>> If two

[PATCH] test: add broken tests for maildir syncing

2017-08-04 Thread David Bremner
Users should be able to specify synced tags in new.tags --- Anarcat had an interesting idea about using "flagged" in new.tags, but it doesn't work, because of (I think) the following code: for (tag = state->new_tags; *tag != NULL; tag++) notmuch_message_add_tag (message, *tag)

Re: a DoS vulnerability associated with conflated Message-IDs?

2017-08-04 Thread David Bremner
Peter Wang writes: > On Thu, 08 Mar 2012 11:37:09 -0500, Daniel Kahn Gillmor > wrote: >> notmuch currently treats all messages with the same Message-ID as >> the same message. I think this could be a vulnerability :( >> >> If two messages have the same Message-ID, is there a guarantee of whic