Re: crashme crashes 2.0.20 with guarantee :-(

Alan Cox (alan@cymru.net)
Sun, 29 Sep 1996 15:59:36 +0100 (BST)

> look at qmail, in ftp://koobera.math.uic.edu/pub/software, to see how
> one *can* implement a mailer without sendmail's holes or excessive
> need for privilege.

Has anyone yet done a serious line by line security review of QMail.
Sendmail 8.7.6 has been through a lot of pretty heavy checking as everyone
is determined to find bugs in it. I'm not saying sendmail is brilliant just
to be careful of the comparisons. Its very easy on the internet to judge
a package by its number of bugs, number of moans seen and forget to
divide by the userbase..

Alan