From debbugs-submit-bounces@debbugs.gnu.org Tue Jan 17 12:08:08 2012 Received: (at submit) by debbugs.gnu.org; 17 Jan 2012 17:08:08 +0000 Received: from localhost ([127.0.0.1]:33779 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RnCVy-0006mc-V5 for submit@debbugs.gnu.org; Tue, 17 Jan 2012 12:08:08 -0500 Received: from eggs.gnu.org ([140.186.70.92]:33387) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RnADx-0003EU-Rk for submit@debbugs.gnu.org; Tue, 17 Jan 2012 09:41:22 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RnACu-0007qM-KX for submit@debbugs.gnu.org; Tue, 17 Jan 2012 09:40:21 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_RP_MATCHES_RCVD autolearn=unavailable version=3.3.2 Received: from lists.gnu.org ([140.186.70.17]:49890) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RnACu-0007qI-J1 for submit@debbugs.gnu.org; Tue, 17 Jan 2012 09:40:16 -0500 Received: from eggs.gnu.org ([140.186.70.92]:41641) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RnACq-0007of-JW for bug-gnu-emacs@gnu.org; Tue, 17 Jan 2012 09:40:16 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RnACh-0007lg-DC for bug-gnu-emacs@gnu.org; Tue, 17 Jan 2012 09:40:12 -0500 Received: from amigo.dent.med.uni-muenchen.de ([138.246.161.12]:46532) by eggs.gnu.org with smtp (Exim 4.71) (envelope-from ) id 1RnACh-0007h7-2a for bug-gnu-emacs@gnu.org; Tue, 17 Jan 2012 09:40:03 -0500 Received: (qmail 13402 invoked from network); 17 Jan 2012 15:39:17 +0100 Received: from unknown (HELO localhost) (138.246.162.185) by amigo.dent.med.uni-muenchen.de with SMTP; 17 Jan 2012 15:39:17 +0100 Received: from wg by localhost with local (Exim 4.69) (envelope-from ) id 1RnAC0-0003n4-5F for bug-gnu-emacs@gnu.org; Tue, 17 Jan 2012 15:39:20 +0100 From: Wolfram Gloger To: bug-gnu-emacs@gnu.org Subject: 23.3; Make base64-decode more fault tolerant Date: Tue, 17 Jan 2012 15:39:20 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 140.186.70.17 X-Spam-Score: -4.2 (----) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 17 Jan 2012 12:08:05 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.2 (----) Hello, Not a bug in Emacs, but I have received base64-encoded mails from a not-so-small company which could not be decoded. It turns out that there was a missing padding character, i.e. the last quartet was "xy=" rather than the proper "xy==". I would suggest that base64-decode should tolerate this, like with the appended patch. Regards, Wolfram. --- src/fns.c~ 2011-04-05 05:46:44.000000000 +0200 +++ src/fns.c 2012-01-17 13:59:26.000000000 +0100 @@ -3590,7 +3590,8 @@ if (c == '=') { - READ_QUADRUPLET_BYTE (-1); + /* Be tolerant against missing final padding '='. */ + READ_QUADRUPLET_BYTE (e-to); if (c != '=') return -1; From debbugs-submit-bounces@debbugs.gnu.org Thu Jan 26 10:35:31 2012 Received: (at control) by debbugs.gnu.org; 26 Jan 2012 15:35:31 +0000 Received: from localhost ([127.0.0.1]:45695 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RqRMI-0003hk-I5 for submit@debbugs.gnu.org; Thu, 26 Jan 2012 10:35:30 -0500 Received: from fencepost.gnu.org ([140.186.70.10]:41906 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RqRMH-0003hf-Nc for control@debbugs.gnu.org; Thu, 26 Jan 2012 10:35:30 -0500 Received: from bb121-7-229-168.singnet.com.sg ([121.7.229.168]:35625 helo=furball) by fencepost.gnu.org with esmtpa (Exim 4.71) (envelope-from ) id 1RqRLk-0004M6-A5 for control@debbugs.gnu.org; Thu, 26 Jan 2012 10:34:57 -0500 From: Chong Yidong To: control@debbugs.gnu.org Subject: severity 10536 minor Date: Thu, 26 Jan 2012 23:34:49 +0800 Message-ID: <87aa5apjdy.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -4.2 (----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.2 (----) severity 10536 minor thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 17 18:20:32 2018 Received: (at control) by debbugs.gnu.org; 17 Apr 2018 22:20:33 +0000 Received: from localhost ([127.0.0.1]:58134 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8Yxk-000523-Or for submit@debbugs.gnu.org; Tue, 17 Apr 2018 18:20:32 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:39666) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8Yxj-00051v-IM for control@debbugs.gnu.org; Tue, 17 Apr 2018 18:20:31 -0400 Received: from 46.67.12.60.tmi.telenormobil.no ([46.67.12.60] helo=corrigan) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1f8Yxh-0002zx-21 for control@debbugs.gnu.org; Wed, 18 Apr 2018 00:20:30 +0200 Received: from larsi by corrigan with local (Exim 4.89) (envelope-from ) id 1f8Yxb-0003A4-8S for control@debbugs.gnu.org; Wed, 18 Apr 2018 00:20:23 +0200 To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #10536 Message-Id: Date: Wed, 18 Apr 2018 00:20:23 +0200 X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) tags 10536 patch From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 17 18:22:54 2018 Received: (at 10536) by debbugs.gnu.org; 17 Apr 2018 22:22:54 +0000 Received: from localhost ([127.0.0.1]:58139 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8Z02-00055i-3o for submit@debbugs.gnu.org; Tue, 17 Apr 2018 18:22:54 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:39805) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8Yzz-00055Z-SL for 10536@debbugs.gnu.org; Tue, 17 Apr 2018 18:22:52 -0400 Received: from 46.67.12.60.tmi.telenormobil.no ([46.67.12.60] helo=corrigan) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1f8Yzw-000615-N1; Wed, 18 Apr 2018 00:22:51 +0200 Received: from larsi by corrigan with local (Exim 4.89) (envelope-from ) id 1f8Yzq-0003AB-Va; Wed, 18 Apr 2018 00:22:42 +0200 From: Lars Ingebrigtsen To: Wolfram Gloger Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: Date: Wed, 18 Apr 2018 00:22:42 +0200 In-Reply-To: (Wolfram Gloger's message of "Tue, 17 Jan 2012 15:39:20 +0100") Message-ID: <874lk9fp71.fsf@mouse.gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Wolfram Gloger writes: > Not a bug in Emacs, but I have received base64-encoded mails from a > not-so-small company which could not be decoded. It turns out that > there was a missing padding character, i.e. the last quartet was > "xy=" rather than the proper "xy==". > > I would suggest that base64-decode should tolerate this, like with > the appended patch. > > Regards, > Wolfram. > > --- src/fns.c~ 2011-04-05 05:46:44.000000000 +0200 > +++ src/fns.c 2012-01-17 13:59:26.000000000 +0100 > @@ -3590,7 +3590,8 @@ > > if (c == '=') > { > - READ_QUADRUPLET_BYTE (-1); > + /* Be tolerant against missing final padding '='. */ > + READ_QUADRUPLET_BYTE (e-to); It probably won't harm anything to add this patch... On the other hand, it's not very common to have base64 encoded data that fails in this manner. What do the rest of you people think? (I think I'm slightly for applying the patch. "Be liberal in what you receive" and all that.) -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 17 22:25:24 2018 Received: (at 10536) by debbugs.gnu.org; 18 Apr 2018 02:25:24 +0000 Received: from localhost ([127.0.0.1]:58334 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8cmc-0007hd-P8 for submit@debbugs.gnu.org; Tue, 17 Apr 2018 22:25:24 -0400 Received: from mail-io0-f182.google.com ([209.85.223.182]:38899) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8cmX-0007hO-I8 for 10536@debbugs.gnu.org; Tue, 17 Apr 2018 22:25:17 -0400 Received: by mail-io0-f182.google.com with SMTP id h9-v6so606850iob.5 for <10536@debbugs.gnu.org>; Tue, 17 Apr 2018 19:25:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=0y+GL3WeZrf7YF5z9riTmKiXPpPEHZQKxR5fe0J+l+g=; b=L9QbK3Zls9uiWHfp334IQIrSQmhyXDXaqA+Yl/e1aZu8VyTWWVZrQKDWhHZrsapMOO 8Mx4XRsS3Gt3rb4t836JDFuW49sHuhlRcl8RFGCIjVvdeU/TP6mBEXRAvDq1TyzEOJAB Zx0MThcW6J8v2HV8ggKEYQkShLhtC65AwDvEQQXvhZBUIbSYWLjyGH8mDdYHQB57Ik4a dUXJK4DSG8OcerFzrh5RE5bF40eBiiF8VOeECKc348/dDJKKrHlAVhSjsyu0qZ058dcJ GOiLstevfTVIWmLQql5jrwepTMtTEdXxwNhE/MMERI549tvBuof7ivTGnIk+ACy5VK2M u8SQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=0y+GL3WeZrf7YF5z9riTmKiXPpPEHZQKxR5fe0J+l+g=; b=Nb/WzFBMOvp1NDzvOl2Rh+AKwPx7Wp49iUDNujjEwZWbJk54FiLdTOQzI0OoX3lWud qNGCzRlYqNaSfvl5Jivmx0bpFau7PQAB25UrMkcmynWAFoJPptALJH+EIavmIPtH4pCK iqPPBCiJyF9m5zzczZ/sEPSWA3CUy2FXTqVm3Jpyti+S2aHysqRmdE5eqkz0/7Pl35VT pBtKkaALpW7FpnEULesS4vHaMu1Vd9A0vL4AeIML27SaMwjlHDLIQuFk5jAek47UL1Np tEeVilDfXBDa9NTBliHfpNhcckLjMFaYXhWjdtQ8CnTIWo8HGxbqWVQbS+1NrH4+sFqI 9raA== X-Gm-Message-State: ALQs6tCAsCY7aEX8aWw15EkGK7EwYxYkYRVA8hhCl+p45pvdaAYXk9GD tFqGg23uEfqHL3XOr21JgVO06g== X-Google-Smtp-Source: AB8JxZqxOkCDOWkwTs7frWWXvwwo0G45lYwtVastUq9bnBsg0959dL9vg3wMHL2mcQ7oNju1+DjuZA== X-Received: by 2002:a6b:c882:: with SMTP id y124-v6mr238844iof.64.1524018308122; Tue, 17 Apr 2018 19:25:08 -0700 (PDT) Received: from zebian (cbl-45-2-119-34.yyz.frontiernetworks.ca. [45.2.119.34]) by smtp.googlemail.com with ESMTPSA id t4-v6sm5693549ita.3.2018.04.17.19.25.07 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Tue, 17 Apr 2018 19:25:07 -0700 (PDT) From: Noam Postavsky To: Lars Ingebrigtsen Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: <874lk9fp71.fsf@mouse.gnus.org> Date: Tue, 17 Apr 2018 22:25:06 -0400 In-Reply-To: <874lk9fp71.fsf@mouse.gnus.org> (Lars Ingebrigtsen's message of "Wed, 18 Apr 2018 00:22:42 +0200") Message-ID: <87bmehtfnh.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, Wolfram Gloger X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Lars Ingebrigtsen writes: > Wolfram Gloger writes: >> there was a missing padding character, i.e. the last quartet was >> "xy=" rather than the proper "xy==". >> >> I would suggest that base64-decode should tolerate this, like with >> the appended patch. >> if (c == '=') >> { >> - READ_QUADRUPLET_BYTE (-1); >> + /* Be tolerant against missing final padding '='. */ >> + READ_QUADRUPLET_BYTE (e-to); > What do the rest of you people think? (I think I'm slightly for > applying the patch. "Be liberal in what you receive" and all that.) Makes sense to me. From debbugs-submit-bounces@debbugs.gnu.org Wed Apr 18 02:20:52 2018 Received: (at 10536) by debbugs.gnu.org; 18 Apr 2018 06:20:52 +0000 Received: from localhost ([127.0.0.1]:58377 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8gSW-0006qN-Gy for submit@debbugs.gnu.org; Wed, 18 Apr 2018 02:20:52 -0400 Received: from eggs.gnu.org ([208.118.235.92]:47424) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8gSR-0006q7-R1 for 10536@debbugs.gnu.org; Wed, 18 Apr 2018 02:20:47 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1f8gSI-0005aD-KS for 10536@debbugs.gnu.org; Wed, 18 Apr 2018 02:20:38 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:39434) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1f8gSI-0005a7-Fn; Wed, 18 Apr 2018 02:20:34 -0400 Received: from [176.228.60.248] (port=3365 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1f8gSH-0003Td-KS; Wed, 18 Apr 2018 02:20:34 -0400 Date: Wed, 18 Apr 2018 09:20:43 +0300 Message-Id: <83zi2111dw.fsf@gnu.org> From: Eli Zaretskii To: Lars Ingebrigtsen In-reply-to: <874lk9fp71.fsf@mouse.gnus.org> (message from Lars Ingebrigtsen on Wed, 18 Apr 2018 00:22:42 +0200) Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: <874lk9fp71.fsf@mouse.gnus.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, wmglo@dent.med.uni-muenchen.de X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -6.0 (------) > From: Lars Ingebrigtsen > Date: Wed, 18 Apr 2018 00:22:42 +0200 > Cc: 10536@debbugs.gnu.org > > > --- src/fns.c~ 2011-04-05 05:46:44.000000000 +0200 > > +++ src/fns.c 2012-01-17 13:59:26.000000000 +0100 > > @@ -3590,7 +3590,8 @@ > > > > if (c == '=') > > { > > - READ_QUADRUPLET_BYTE (-1); > > + /* Be tolerant against missing final padding '='. */ > > + READ_QUADRUPLET_BYTE (e-to); > > It probably won't harm anything to add this patch... On the other hand, > it's not very common to have base64 encoded data that fails in this > manner. > > What do the rest of you people think? (I think I'm slightly for > applying the patch. "Be liberal in what you receive" and all that.) Could this "omission" be a sign of malicious stuff in there? If so, maybe it's better to introduce a variable that would allow this to be tolerated, and by default fail with a message telling the user that if they trust the source of the data, set the variable and retry? From debbugs-submit-bounces@debbugs.gnu.org Wed Apr 18 05:43:14 2018 Received: (at 10536) by debbugs.gnu.org; 18 Apr 2018 09:43:14 +0000 Received: from localhost ([127.0.0.1]:58462 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8jcM-0003AK-FL for submit@debbugs.gnu.org; Wed, 18 Apr 2018 05:43:14 -0400 Received: from mail-wr0-f193.google.com ([209.85.128.193]:33148) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8jcH-00039n-ST for 10536@debbugs.gnu.org; Wed, 18 Apr 2018 05:43:09 -0400 Received: by mail-wr0-f193.google.com with SMTP id z73-v6so3013527wrb.0 for <10536@debbugs.gnu.org>; Wed, 18 Apr 2018 02:43:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:mail-copies-to:gmane-reply-to-list :date:in-reply-to:message-id:mime-version:content-transfer-encoding; bh=PY8MOxyAsvTGezObAbQNxOdedXzTodYzZDUfs7sdrtQ=; b=HzqqfmuOmngfH4Jk0PzwbeNHykQU3bAVXHMS2RhKUlY0rShSacbUdGU3/j+P3K77Lt sf1DkKZMy+eLjyzgkAKLoMuRcJhs1moULPZZ+h6a6S29EP1EjHB3a0bFiI/m8PLHaUVA B8AdwMoWUgukNxjUIsxqXw440ah0U+qKZQRdje3zKmLLv+GkWNKnQ3krXJYUTpDmFZFl ovCLAbhiSljV+BN73FO87kELzbqMUY+/eRP7FJWM+cLICRFzFzd6X/u8IL04FioQwgy4 mpBXdYTdr7tjr5iMbjl6YIX7QCeVYJfcajSVm/jM1SpsRQKJvnJwB+ph22emoeqfwko8 Nfew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:mime-version :content-transfer-encoding; bh=PY8MOxyAsvTGezObAbQNxOdedXzTodYzZDUfs7sdrtQ=; b=LjUSl0Nnab0AwswVtAq+3OZwIsEppmrcuGNynXzVk+JKYC2+J17aNDu2cHEhqIzc0N IoLHIvpygCFCrmu5MnxcL0PLPr7cjNr5UuAB0XxcVcbf31F1tF4dGJM0jNQgq9TlJy3m ZbmCwOTEvTd1RziCPn4wW48b8WZrEen/2A3FVygSM2PQGCJt9uZs02xhz+ypB6zXva1R w624ZvzgXf2Jugqvn1L5qpRYX3Bcm0HDMu70QA1mlslaqehAFRpVsZooUNMNgSACckLB NVjpSrtzYfSJRcS+lu/keZ/ffPtKiqnt3ZnIAhGX4G9IpPDLjjA6Pobw8V5NefvPdso8 Y9XQ== X-Gm-Message-State: ALQs6tC7xAufbS2uxXJm0tdfd+AymaTltmUkww5E1ZBDUO85p3RtOjZr Wm2nBw8bBMUs6T6L9+z75OOh8B575mo= X-Google-Smtp-Source: AIpwx4/vopAbVeXeCIiD9wEKpwQjjdONN1482zDsaxOGnOuwEt5d6B41CN4heW83aEn9fPO8E6y2zw== X-Received: by 2002:adf:af28:: with SMTP id z37-v6mr1133599wrc.72.1524044579510; Wed, 18 Apr 2018 02:42:59 -0700 (PDT) Received: from rpluim-ubuntu (100.8.30.213.rev.vodafone.pt. [213.30.8.100]) by smtp.gmail.com with ESMTPSA id u4-v6sm653422wre.97.2018.04.18.02.42.57 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 18 Apr 2018 02:42:58 -0700 (PDT) From: Robert Pluim To: Eli Zaretskii Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: <874lk9fp71.fsf@mouse.gnus.org> <83zi2111dw.fsf@gnu.org> X-Debbugs-No-Ack: yes Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Wed, 18 Apr 2018 11:42:52 +0200 In-Reply-To: <83zi2111dw.fsf@gnu.org> (Eli Zaretskii's message of "Wed, 18 Apr 2018 09:20:43 +0300") Message-ID: <87in8o3l5v.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, Lars Ingebrigtsen , wmglo@dent.med.uni-muenchen.de X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Eli Zaretskii writes: >> From: Lars Ingebrigtsen >> Date: Wed, 18 Apr 2018 00:22:42 +0200 >> Cc: 10536@debbugs.gnu.org >>=20 >> > --- src/fns.c~ 2011-04-05 05:46:44.000000000 +0200 >> > +++ src/fns.c 2012-01-17 13:59:26.000000000 +0100 >> > @@ -3590,7 +3590,8 @@ >> > >> > if (c =3D=3D '=3D') >> > { >> > - READ_QUADRUPLET_BYTE (-1); >> > + /* Be tolerant against missing final padding '=3D'. */ >> > + READ_QUADRUPLET_BYTE (e-to); >>=20 >> It probably won't harm anything to add this patch... On the other hand, >> it's not very common to have base64 encoded data that fails in this >> manner. >>=20 >> What do the rest of you people think? (I think I'm slightly for >> applying the patch. "Be liberal in what you receive" and all that.) > That principle is starting to change: "Be intolerant in what you receive, else malicious actors will exploit your tolerance" is starting to become more common. > Could this "omission" be a sign of malicious stuff in there? If so, > maybe it's better to introduce a variable that would allow this to be > tolerated, and by default fail with a message telling the user that if > they trust the source of the data, set the variable and retry? You mean that someone would deliberately send incorrect base64 in the hope that interim attachment scanners would ignore it, but that the final recipient's software would be tolerant and decode it? That seems a little farfetched [1], but if it really is uncommon, then a variable would not do much harm. Robert Footnotes: [1] Then again, someone just hacked a casino via an aquarium thermometer, so who am I to judge what=CA=BCs farfetched. From debbugs-submit-bounces@debbugs.gnu.org Wed Apr 18 05:48:49 2018 Received: (at 10536) by debbugs.gnu.org; 18 Apr 2018 09:48:49 +0000 Received: from localhost ([127.0.0.1]:58466 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8jhl-0003IC-HX for submit@debbugs.gnu.org; Wed, 18 Apr 2018 05:48:49 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33346) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8jhg-0003Hu-Gc for 10536@debbugs.gnu.org; Wed, 18 Apr 2018 05:48:43 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1f8jhW-0004Jj-Ei for 10536@debbugs.gnu.org; Wed, 18 Apr 2018 05:48:35 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05 autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:41971) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1f8jhW-0004JZ-Ay; Wed, 18 Apr 2018 05:48:30 -0400 Received: from [176.228.60.248] (port=4567 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1f8jhV-0002nM-Jn; Wed, 18 Apr 2018 05:48:30 -0400 Date: Wed, 18 Apr 2018 12:48:39 +0300 Message-Id: <83h8o826bs.fsf@gnu.org> From: Eli Zaretskii To: Robert Pluim In-reply-to: <87in8o3l5v.fsf@gmail.com> (message from Robert Pluim on Wed, 18 Apr 2018 11:42:52 +0200) Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: <874lk9fp71.fsf@mouse.gnus.org> <83zi2111dw.fsf@gnu.org> <87in8o3l5v.fsf@gmail.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, larsi@gnus.org, wmglo@dent.med.uni-muenchen.de X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -6.0 (------) > From: Robert Pluim > Cc: Lars Ingebrigtsen , wmglo@dent.med.uni-muenchen.de, 10536@debbugs.gnu.org > Date: Wed, 18 Apr 2018 11:42:52 +0200 > > > Could this "omission" be a sign of malicious stuff in there? If so, > > maybe it's better to introduce a variable that would allow this to be > > tolerated, and by default fail with a message telling the user that if > > they trust the source of the data, set the variable and retry? > > You mean that someone would deliberately send incorrect base64 in the > hope that interim attachment scanners would ignore it, but that the > final recipient's software would be tolerant and decode it? No, I mean that this omission is either due to a bug at the malicious end or is somehow related to the malicious part itself (i.e. it is part of the scam). From debbugs-submit-bounces@debbugs.gnu.org Wed Apr 18 07:41:01 2018 Received: (at 10536) by debbugs.gnu.org; 18 Apr 2018 11:41:01 +0000 Received: from localhost ([127.0.0.1]:58517 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8lSP-0007ym-I0 for submit@debbugs.gnu.org; Wed, 18 Apr 2018 07:41:01 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:54163) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f8lSO-0007yR-1J for 10536@debbugs.gnu.org; Wed, 18 Apr 2018 07:41:00 -0400 Received: from 46.67.12.60.tmi.telenormobil.no ([46.67.12.60] helo=corrigan) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1f8lSI-0007hS-Ma; Wed, 18 Apr 2018 13:40:57 +0200 Received: from larsi by corrigan with local (Exim 4.89) (envelope-from ) id 1f8lSB-0003qW-Ug; Wed, 18 Apr 2018 13:40:47 +0200 From: Lars Ingebrigtsen To: Eli Zaretskii Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: <874lk9fp71.fsf@mouse.gnus.org> <83zi2111dw.fsf@gnu.org> Date: Wed, 18 Apr 2018 13:40:47 +0200 In-Reply-To: <83zi2111dw.fsf@gnu.org> (Eli Zaretskii's message of "Wed, 18 Apr 2018 09:20:43 +0300") Message-ID: <87r2ncd9og.fsf@mouse.gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, wmglo@dent.med.uni-muenchen.de X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Eli Zaretskii writes: >> > --- src/fns.c~ 2011-04-05 05:46:44.000000000 +0200 >> > +++ src/fns.c 2012-01-17 13:59:26.000000000 +0100 >> > @@ -3590,7 +3590,8 @@ >> > >> > if (c == '=') >> > { >> > - READ_QUADRUPLET_BYTE (-1); >> > + /* Be tolerant against missing final padding '='. */ >> > + READ_QUADRUPLET_BYTE (e-to); [...] > Could this "omission" be a sign of malicious stuff in there? Hm... I don't think so. This is about the very last characters of a base64-encoded text. The standard says that if there are too few bytes in the original text, then the base64-encoded thing should be padded with = signs. Here's an example: (base64-encode-string "hel") => "aGVs" (base64-encode-string "hell") => "aGVsbA==" (base64-encode-string "hello") => "aGVsbG8=" (base64-encode-string "helloh") => "aGVsbG9o" The proposed patch is that base64-decode should handle the end-padding and missing end-padding equivalently: That is, both "aGVsbA==" and "aGVsbA" should decode to "hell". Unless I'm missing something, I don't think there's much room for maliciousness here... -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 27 11:42:47 2019 Received: (at 10536) by debbugs.gnu.org; 27 Jun 2019 15:42:47 +0000 Received: from localhost ([127.0.0.1]:39319 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgWXv-0002dt-0L for submit@debbugs.gnu.org; Thu, 27 Jun 2019 11:42:47 -0400 Received: from quimby.gnus.org ([80.91.231.51]:44344) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgWXq-0002dZ-9o for 10536@debbugs.gnu.org; Thu, 27 Jun 2019 11:42:46 -0400 Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=stories) by quimby.gnus.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hgWXl-0007Cx-Ou; Thu, 27 Jun 2019 17:42:40 +0200 From: Lars Ingebrigtsen To: Wolfram Gloger Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: Date: Thu, 27 Jun 2019 17:42:37 +0200 In-Reply-To: (Wolfram Gloger's message of "Tue, 17 Jan 2012 15:39:20 +0100") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Wolfram Gloger writes: > - READ_QUADRUPLET_BYTE (-1); > + /* Be tolerant against missing final padding '='. */ > + READ_QUADRUPLET_BYTE (e-to); We discussed this a bit last year, but didn't come to any conclusion, but I think on the whole, having base64-decode be strict or non-strict here doesn't make much practical difference (because it's v [...] Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Wolfram Gloger writes: > - READ_QUADRUPLET_BYTE (-1); > + /* Be tolerant against missing final padding '='. */ > + READ_QUADRUPLET_BYTE (e-to); We discussed this a bit last year, but didn't come to any conclusion, but I think on the whole, having base64-decode be strict or non-strict here doesn't make much practical difference (because it's very uncommon to strip the trailing = padding characters), but theoretical paranoia about this somehow leading to subsequent errors... somehow... may be warranted. So I'm closing this bug report. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 27 11:42:47 2019 Received: (at control) by debbugs.gnu.org; 27 Jun 2019 15:42:47 +0000 Received: from localhost ([127.0.0.1]:39321 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgWXv-0002dv-AU for submit@debbugs.gnu.org; Thu, 27 Jun 2019 11:42:47 -0400 Received: from quimby.gnus.org ([80.91.231.51]:44358) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgWXu-0002dh-AB for control@debbugs.gnu.org; Thu, 27 Jun 2019 11:42:46 -0400 Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=stories) by quimby.gnus.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hgWXr-0007D5-NY for control@debbugs.gnu.org; Thu, 27 Jun 2019 17:42:45 +0200 Date: Thu, 27 Jun 2019 17:42:43 +0200 Message-Id: To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #10536 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: tags 10536 wontfix close 10536 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) tags 10536 wontfix close 10536 quit From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 27 13:16:36 2019 Received: (at 10536) by debbugs.gnu.org; 27 Jun 2019 17:16:36 +0000 Received: from localhost ([127.0.0.1]:39473 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgY0i-0000TJ-0v for submit@debbugs.gnu.org; Thu, 27 Jun 2019 13:16:36 -0400 Received: from mail-io1-f49.google.com ([209.85.166.49]:40432) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgY0f-0000Mj-5m for 10536@debbugs.gnu.org; Thu, 27 Jun 2019 13:16:33 -0400 Received: by mail-io1-f49.google.com with SMTP id n5so6423721ioc.7 for <10536@debbugs.gnu.org>; Thu, 27 Jun 2019 10:16:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=khWw3GPSeYxD/G7Lj223fYxe/o5nwQUw0xRsnR6TGa4=; b=W2K4WH8H6pehIRkySoU6f9FnwmeOMgcf7Mg6qQWzUDZ1ESehwfWkbBSLYsD6sPOL5w XZHrQVoa3YsqoBALt+mlitJoL9m3c89Vl7h5VU7TR4pw/wrUbKY03/8sAvLq9sPKV6IS /h53bzDv4wgZVfUFCTlUU3COc5gTTFRxyKw3GZq+FBZ2pZVMeZrPiQdJ5zfunKU0VNkZ u3+Kz6cC/2TicmPdgSug7zOvcGyvM4ie8qoOeCp05RA9FY3d6wN1v4nB++PKTZ/Iv+Pu Ir8eaR73SFoELEHLj7OF5c7nYH7R5Hzke1X3/O2nhOv/nDf9Ro+QFy0jR3AiRcLBH4fK OEUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=khWw3GPSeYxD/G7Lj223fYxe/o5nwQUw0xRsnR6TGa4=; b=n9MRr18Gtr8lvcnk8y9bqn8YuG1cibPKIbsgfdyg/nyTHm+ZXxJzQlb5IxXOQ59qgf FgGkXzsfkYTY6uXHWTkeRTZFbMMGqavQWB5yGv0F+RK3t/58e8Egnrm30Prd+us6LPno 8fkEq8wD5EC9ss3j2IxCJCJ+SDjvOsH/GCmZvZVKC+I6hm1qNhYXhDoV4lbb4oUC06px tr5jmAGLyr1YRM8+0BKXqicDzYGluI3VaLeGDSAzguUIKNxMIVVWrba9xZjS4nZX/3c+ Vg9HcUbaFueu1iTlcrelqKgcFZljf9+hguOgfkR+romEO1qZnzqgmprQHNzUScvdmIVp GTKA== X-Gm-Message-State: APjAAAVljgNVaBnqPld9ZJlD190E1NuUyXeLi8n5HkqADZ04zOfKtnuc HWIeSzRxnZrWGIDkiZ7lERFfeYvj X-Google-Smtp-Source: APXvYqz8Vm9ewJWHzV5npAnM6yDtlof4qkR7k50wDZ2bAFc/TFv7iD+LBlDRjfZk3qYaBjOhTOkhBA== X-Received: by 2002:a02:b914:: with SMTP id v20mr5982976jan.83.1561655787380; Thu, 27 Jun 2019 10:16:27 -0700 (PDT) Received: from vhost2 (CPE001143542e1f-CMf81d0f809fa0.cpe.net.cable.rogers.com. [99.230.51.196]) by smtp.gmail.com with ESMTPSA id k5sm2605932ioj.47.2019.06.27.10.16.26 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 27 Jun 2019 10:16:27 -0700 (PDT) From: Noam Postavsky To: Lars Ingebrigtsen Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: Date: Thu, 27 Jun 2019 13:16:27 -0400 In-Reply-To: (Lars Ingebrigtsen's message of "Thu, 27 Jun 2019 17:42:37 +0200") Message-ID: <85sgrv54pg.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1.92 (windows-nt) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, Wolfram Gloger X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Lars Ingebrigtsen writes: > Wolfram Gloger writes: > >> - READ_QUADRUPLET_BYTE (-1); >> + /* Be tolerant against missing final padding '='. */ >> + READ_QUADRUPLET_BYTE (e-to); > > We discussed this a bit last year, but didn't come to any conclusion, > but I think on the whole, having base64-decode be strict or non-strict > here doesn't make much practical difference (because it's very uncommon > to strip the trailing = padding characters), but theoretical paranoia > about this somehow leading to subsequent errors... somehow... may be > warranted. We did meanwhile get a base64url-* which has an optional NOPAD argument, and base64-decode-* functions got an optional BASE64URL argument which allows decoding unpadded base64, by the way. From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 27 13:22:28 2019 Received: (at 10536) by debbugs.gnu.org; 27 Jun 2019 17:22:28 +0000 Received: from localhost ([127.0.0.1]:39491 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgY6O-0001VI-6L for submit@debbugs.gnu.org; Thu, 27 Jun 2019 13:22:28 -0400 Received: from quimby.gnus.org ([80.91.231.51]:45848) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hgY6M-0001VA-DV for 10536@debbugs.gnu.org; Thu, 27 Jun 2019 13:22:26 -0400 Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=stories) by quimby.gnus.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hgY6J-00081N-EJ; Thu, 27 Jun 2019 19:22:25 +0200 From: Lars Ingebrigtsen To: Noam Postavsky Subject: Re: bug#10536: 23.3; Make base64-decode more fault tolerant References: <85sgrv54pg.fsf@gmail.com> Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAHlBMVEU0KClKNzheQUQ8MC83 KywMBgiegoIuIyRiT1AhFxrTAitSAAACLElEQVQ4jXWTvY6jMBDHh10kaoN0osVJ4fIIFFs6i6W9 F0iR9gpEyUknIcqwUuQXiCLe9v4zBpIiNw3j+Xk+PVD7Wjr69K+FjuY/oFF6EaO9NpOoAQTRegLQ KlWB0HsVQCop2yIctAGoSqhFGqqRSAUIOddULGVapLieKVVKZIrtQh4i0ainzamqmgeifujJNXXt Kve5dw9CAwA1jiW/xK5uBJYMBiKKnY2d1rWD5xPoAVxz0HqHNHBdgQQrFYY2qaxyUkvJoIe/Mldp fVIhecbgj8eY1ofgye5KVS3Atx2jjr8MMskReX1t/XVz8DvO0Scu8qZdQ3WXlD04Odloyrstx+9K PJCDaoBpW4I2MwGgh+OkM7PVxACNYBwUTab+0QVw7TLv9+wRx/XRm30eqkXzhyUHpnT0empSL4Gm wizlxo4iP5lLlfqOXzsPfWR4WhvxUl1KvDhG5vUKnKX+HQSjTTWmpsMbCqC3sIps1mYn4+UcRLlf 9xSBLrJNAMnf+GHnFV9C1Ra/gkEYxDGy+uiv5Ko4EqzMwh/w3XBVriZST6JTlQloflISOy7B8hZB bB/XnMPygGFNZMGcxRl7V/G9ZEh6tgNAgQbPihy+vFkMRGQFEdquhmG8byoHtbg6ymGe5wdK2GO+ j3Odvt33Rf4rV+Az+3wNI6vq8HH/1vlHbmaRkZIxaOf5Nj8JAH9u5zOzW9CF0DDfTqeT3D+L7cYn gJHtL4S+XttP/wC8O1LYTdAkfAAAAABJRU5ErkJggg== Date: Thu, 27 Jun 2019 19:22:23 +0200 In-Reply-To: <85sgrv54pg.fsf@gmail.com> (Noam Postavsky's message of "Thu, 27 Jun 2019 13:16:27 -0400") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Noam Postavsky writes: > We did meanwhile get a base64url-* which has an optional NOPAD argument, > and base64-decode-* functions got an optional BASE64URL argument which > allows decoding unpadded base64, by the way. Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 10536 Cc: 10536@debbugs.gnu.org, Wolfram Gloger X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Noam Postavsky writes: > We did meanwhile get a base64url-* which has an optional NOPAD argument, > and base64-decode-* functions got an optional BASE64URL argument which > allows decoding unpadded base64, by the way. Ah, yeah, I'd forgotten about that. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From unknown Fri Aug 15 21:20:47 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 26 Jul 2019 11:24:08 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator