dovecot-2.0: imap-login: Reduced the max. number of allowed bad ...

dovecot at dovecot.org dovecot at dovecot.org
Fri Apr 8 20:23:21 EEST 2011


details:   http://hg.dovecot.org/dovecot-2.0/rev/a0c1c6f7cf6e
changeset: 12731:a0c1c6f7cf6e
user:      Timo Sirainen <tss at iki.fi>
date:      Fri Apr 08 20:23:17 2011 +0300
description:
imap-login: Reduced the max. number of allowed bad commands.
This makes it even more sure that we won't reply with anything dangerous
when attempting to access us with HTTP client.

diffstat:

 src/imap-login/client.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (12 lines):

diff -r 9b94597c3f02 -r a0c1c6f7cf6e src/imap-login/client.c
--- a/src/imap-login/client.c	Fri Apr 08 20:21:58 2011 +0300
+++ b/src/imap-login/client.c	Fri Apr 08 20:23:17 2011 +0300
@@ -26,7 +26,7 @@
 #define MAX_IMAP_LINE 8192
 
 /* Disconnect client when it sends too many bad commands */
-#define CLIENT_MAX_BAD_COMMANDS 10
+#define CLIENT_MAX_BAD_COMMANDS 3
 
 const struct login_binary login_binary = {
 	.protocol = "imap",


More information about the dovecot-cvs mailing list