Re: [courier-users] SQWebmail bug? (Cookies cause SQWebmail not to

JP wrote:
>
> Sam, if someone else were to write an acceptable patch that updated
> SQWebmail to handle larger cookies, would you be willing to accept it
> into the main trunk?

All the patch needs to do is redefine SOCKENVIRONLEN in sqwebmail.h.
It's currently set to 4k. The RFCs for the cookie mechanism recommend
that agents support at least 20 cookies of at least 4k each.
Conceivably, you might argue that sqwebmail should deal with at least
80k of cookie input.

While making that argument, consider that allowing greater input means
that you may increase the likelihood of a buffer overflow occurring in
one of the external tools that sqwebmail uses. Also consider that while
using sqwebmail, you're going to be sending 4k+ of data for every link
you click on. It's not going to move very fast. Regardless of whether
or not sqwebmail "should" accept larger input sizes, I'd personally work
on keeping siteminder's data out of sqwebmail.

The modification required is minor enough that it can be done for the
site that needs it.

http://zvon.org/tmRFC/RFC2109/Output/chapter6.html#sub3
http://zvon.org/tmRFC/RFC2965/Output/chapter5.html#sub3


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=...720&dat=121642
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users