From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Authentication-Results: plum.tunbury.org; dkim=pass (1024-bit key; unprotected) header.d=inria.fr header.i=@inria.fr header.a=rsa-sha256 header.s=dc header.b=oOKqld1H; dkim-atps=neutral Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=192.134.164.83; helo=mail2-relais-roc.national.inria.fr; envelope-from=caml-list-owner@inria.fr; receiver=tunbury.org Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) by plum.tunbury.org (Postfix) with ESMTP id 90777400A2 for ; Tue, 17 Feb 2026 14:34:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inria.fr; s=dc; h=message-id:date:mime-version:from:to:references: in-reply-to:content-transfer-encoding:subject:reply-to: sender:list-id:list-help:list-subscribe:list-unsubscribe: list-post:list-owner:list-archive; bh=oYlPetqKIiwkfw68kpMHmiUaWFOah0UwWatcerfRF9c=; b=oOKqld1HVYq0ak/H9RZjJr9CHm8Re3UcxwsETQAwtsEMQe8EQVlCkkWB eS/hDW3PV1nfGFW0aSrGw8OG844Wxab9131NRN7WIBmF15+4wgirKJ9ol ws4PSZpKL99cGQK+dvYVRCNfyze08mvmlCmxjHFA/uBDbMpsSfc2k47M7 A=; X-CSE-ConnectionGUID: LYo/xQ9qS/CoEwZ1GncdzA== X-CSE-MsgGUID: A4XsUP+lRD+BkVVXFPnjEg== Authentication-Results: mail2-relais-roc.national.inria.fr; dkim=none (message not signed) header.i=none; spf=SoftFail smtp.mailfrom=caml-list-owner@inria.fr; spf=None smtp.helo=postmaster@prod-sympa-app.inria.fr Received-SPF: SoftFail (mail2-relais-roc.national.inria.fr: domain of caml-list-owner@inria.fr is inclined to not designate 128.93.162.27 as permitted sender) identity=mailfrom; client-ip=128.93.162.27; receiver=mail2-relais-roc.national.inria.fr; envelope-from="caml-list-owner@inria.fr"; x-sender="caml-list-owner@inria.fr"; x-conformance=spf_only; x-record-type="v=spf1"; x-record-text="v=spf1 include:mailout.safebrands.com a:basic-mail.safebrands.com a:basic-mail01.safebrands.com a:basic-mail02.safebrands.com ip4:128.93.142.0/24 ip4:192.134.164.0/24 ip4:128.93.162.160 ip4:128.93.162.3 ip4:128.93.162.88 ip4:89.107.174.7 mx ~all" Received-SPF: None (mail2-relais-roc.national.inria.fr: no sender authenticity information available from domain of postmaster@prod-sympa-app.inria.fr) identity=helo; client-ip=128.93.162.27; receiver=mail2-relais-roc.national.inria.fr; envelope-from="caml-list-owner@inria.fr"; x-sender="postmaster@prod-sympa-app.inria.fr"; x-conformance=spf_only X-IronPort-AV: E=Sophos;i="6.21,296,1763420400"; d="scan'208";a="263878830" Received: from prod-sympa-app.inria.fr ([128.93.162.27]) by mail2-relais-roc.national.inria.fr with ESMTP; 17 Feb 2026 15:34:21 +0100 Received: by prod-sympa-app.inria.fr (Postfix, from userid 990) id D94AF829CB; Tue, 17 Feb 2026 15:34:20 +0100 (CET) Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) by prod-sympa-app.inria.fr (Postfix) with ESMTP id CCE9B829CB for ; Tue, 17 Feb 2026 15:34:10 +0100 (CET) X-CSE-ConnectionGUID: s60B3jo6Qx6hbvQa7gctnA== X-CSE-MsgGUID: 5JSHLZGgRkea7RjpDJH2wA== IronPort-SDR: 69947c47_rKhET1POhJr6sqzRYFYSllD+rlFQPW49SyNFiMs7V0AYGjc VoPN9DNFnWFCFheRwHG1FTtmTyjKhlW0pl8JRZw== X-ThreatScanner-Verdict: Negative X-IPAS-Result: =?us-ascii?q?A0HiCQDEe5Rp/8hZSdVagQmBUIJBB4EGWTMEC0mEWI9Tg?= =?us-ascii?q?iSEO5lfgX8PAQMBDVEEAQEDAQOFAAKNIAIeBwEEMAkOAQIEAQEBAQMCAwEBA?= =?us-ascii?q?QEBAQEBAQ0BAQUBAQECAQECBAYBAoEKE4ZPAQyCWzuCFiyBCwEBAQMjFQgBA?= =?us-ascii?q?TgPCxgCAh8HAgJWBhUBAYJ+giMCTwesW4EygQGCDAEBBtwqgWcJgR8uhW+CZ?= =?us-ascii?q?QGFdDiEQicbP4FOgRUngwM+gQWHGYJpgiaBDopGiRZSeBwDWSwBVRMXCwcFX?= =?us-ascii?q?kVDAyovLSNLBS0dgSMhHRcUH1gbBwUSISoHCYF1AgIEghB4ggEPhmx5Ay5vG?= =?us-ascii?q?g4iAj5cUQU+C18lAgELbT03CQsbBD2PLEGrIqF5hCaBZJ95BhMvgUuCJgESk?= =?us-ascii?q?1wGM5JSmQYiqR+BaD2BWTMaCCgIO4JnTwMZD444J4hVuklCNTwCBwsBAQMJk?= =?us-ascii?q?h6BSwEB?= IronPort-PHdr: A9a23:OTeuxRNmqwKCpZ/R4qEl6nZHBxdPi9zP1u491JMrhvp0f7i5+Ny6Z QqDvqkr1AeCB9yKuqMMotGVmp6jcFRI2YyGvnEGfc4EfD4+ouJSsioeReWoMgnFFsPsdDEwB 89YVVVorDmROElRH9viNRWJ+iXhpTEdFQ/iOgVrO+/7BpDdj9it1+C15pbffxhEiCCybL58I xi6txndutUZjYd8N6o8zh/Er39VcOlK2G1kIk6ekBn76sqs5pBo7j5eu+gm985OUKX6e7o3Q LlFBzk4MG47+dPmuwDbQQWA/nUTXXwanwRHDQbY9B31UYv/vSX8tupmxSmVJtb2QqwuWTSj9 KhkVhnlgzoaOjEj8WHXjstwjL9HoB+kuhdyzZLYbJ2TOfFjeK7WYNEUSndbXstJVCJPDIyzY IUSAeQBI+hYoYvyqEcBoxalGQmhBvnixiNUinPo36A31fkqHwHc3AwnGtIDqHbao8/zNKcUT ++117TDwzLdYPNW3zfy9pLIcgw8qvyLXbJ/a8zRyU8xGAPelViQrJLqPzOT1usTqWib8/BsV eW1i24osgx8pCWkycgwhIfTnI0V1kzE+jtjwIYzPdC2RkB1bN+5HZdMsyyWK4t7T98mTmxpp io21L4Lt5G1cSUO1pkqyQDSZviHfYaG7RzvSOKcLSp3iX57er+yiRS//E69weP/Tsm5yEhGo jdLn9XWtH0A2Qbf58uDR/dn4EutxSqD2xjX5+1aO0w4iLfXJp87zrItkpcfr17PEy/5lUjwk aSYbF8r+vKy5OTierjmpoGTN4tzigzmN6QhgM2/AeAiPggLQWeb+eK826P5/U3lWrlKiec2k qbBvJDbI8QUuLK5DhdL3oo+5RuzFTWr3doCkXQEKF9JYgyLg5T1N13WJfD3F/a/g1CikDdxw PDGO6XsApXXIXjFlrfuY6195lVZyAUtzdBf4YxbCqsdIP7pXU/xrtPYAgcjMwOo2+bnFMl91 oQGVG2TGKCZNafSvUaM5uIuOOmMeJQYuC39Kvgg//7hl2U1mV4bfamz3JsYcmq0Hvp8I0mBZ 3rjmc8OEX0WsQomUOzqlFqCXCZOa3qqUKIz+DY7BoG8A4rbSI6jj6SN3D2lEZ1IZW5IEEiBE XLyeIWFX/cAcieSLdFhkjwCS7ehUZMh2QuptA/gxLprNvfb+i4ZtZLmzNV7/+Ldmh8s+zJoE 8mT1XmBQHxxnmwSXT85wLhyr1RkxFmb3qZ0m+dYFcRd5/5RSAk3KYPSwfFiB9DpQgLBcM+GS Fa4TdWiBjE8Vso/zcYWbUhySJ2eiUWJ1COvB/oRlqeXLJ0y6KPVmXbrbY4pwH/D0OwljkI6a spJL2yvwKBloVv9HYnMxmWQkaCnbuw50S7L+X2fhT6OtUdeXRVYVKjFW30Feg3Rt9uvtRCKd KOnFblyalgJ8sWFMKYfMrUB7H1DTfbnY5HFZn6p3ny3HVCOz6+Na4zjfyMc2j/cAQ4KiVNb5 m6IYC45ACrpuGfCFHp2D1u6Y0rq9+RlgHa2Tkk51R3MaFduhPKu4hBAvfWHULsI264c/iIoq jF6BlG4itLfDdyNvCJkcaVabMkhplBd2jGRrBRza7qnKa0qnVsCa0J3skfpgg1wEZlFmNM2o WkCyQNzLeSd3VNHeimEm5fqNdU7M0HU+xaiI+7T01Dai5ON/7sXre8/sxPltR2oEUwr9zNm1 cNU2j2S/MeCCg1aSp/3Xkstknoy77jHfikw4Z/V3nxwIOG1tDHFwdcgGOoizF6pYd5eNKqOE AK6HdcdAoCiL+kjml7haRxhXqga9KcyOc69X/6L2KimJvommyipzCxG7I17zkOQ5n9kUOebl 50Bwvyewk6GT2Km1Qzn7ZuxydECP2lKTQ/dgWD+CYVcZ7N/Z9MOAGaqeIisw8lmwoXqQzhe/ UKiAFUP3ImofwCTZhrzx141twxfrHq5lC+/1zExnSsuq//V3CXIxen5XB8KOmhGXnUkik3ja 9vR7ZhSTA2zYg4lmQHwr0bzwa5Wv4x6ImnVTF1UOS/sICsxGrv1vb2EbclV7ZouuigCS+Wwb 2eRTbvlqgcb2Sfud4dH7AgybCri+pDwnhghzXmYMG42t33BP8d52RbY4tXYA/9XxDsPAidi2 3HbAV21Pt/h+tvx9d+Lsum4UW+6fphecS/m15/GszG0rWFnGhywmfmvl8avS1Fhl3CgkYk7E 3+Q9F71ecHz2r6/MP57c0UNZhe08Md8Foxk08MxiJwWxXkGl8CQ9HsDn330NIYT0qb/YXwRA D8TloSMu066gwszfzTTn9qqMxfVitFsbNS7fG4Mjyc07sQRTbyR8KQBhixt5FyxsQPWZ/F52 DYb0/onrnAA0IRr8EIgyDuQBrcKEAxWJyvpwl6I5ta4ob5/YWuvd7WqyAx5h9/rX9Tg6klMH W30fJsvB3o67sx5Nl/X+Hj+6ofpYsWWasgc/E7cg1LLiO5bL4g0n/wBiH98OG7zinYizvYyk R1k2Zzp2erPY3Uo5q+yBQRUcyHkf85GsC+4lr5Qx4zFl5DqBJhqHS8HGYflXe79WixHruzpb k6LAFhe4j+SS7/WHAvZ6Bx/6XnIFtjuPnWTbhH11P1EQx+QbAxaiQEQB3Ahm4IhUxut3Irne Vt44TYY4hj5rAFNw6RmLUu3VGCXvwquZjouLfrXZBNL8gFP4VvUOs2C/6pyGS9f5JiosA2KL CSSeQ1JCWgDXkHMCUrkO/Gi4tzJ8u7QAeTbTbOGebKVtelXTOuF37qq24piuTOBNsOCJGUkC Oc0mwJCUX1/B8XFimAPRigQxEevJ4aQoBax/DEyr9jqqq2wHl20o9veTeEKaYYKmVj+m6qIO u+OiTwsLD9Z0shJ3nrU0P0E20ZUjShydj6rGLBGtCjXTauWlLUEanxTIy51KsZM6LoxmwdXP suOwNP80Lh1ldYwBldDWEb93MazaoZZRgP1fEOCH0uNOLmccHfTxNrrZKqnVbBKpOBdthn2v DubFUL5InKEjTajBHXNealcySqcOhJZooS0dB1gXHPiQNzRYRq+KNZrjDcyzNXcY1vPOG4aP CJgNURXoe/Ihcu5qvB2GmgH63dlK+Seh2Ce9eaKcv7+XtNuDyRymvhGpnMgxOkMhBw= IronPort-Data: A9a23:9DmoQqyouR+CkbaEagR6t+dVwirEfRIJ4+MujC+fZmUNrF6WrkUDz DFNW2yFa/uOMDCgf4skO4/lph8D7Z+AztZqGgY9r1hgHilAwSbnLYTAfx2oZ0t+DeWaERk5t 51GAjXkBJppJpMJjk71atANlVEliOfVAOO6ULOZUsxIbVcMYD87jh5+kPIOjIdtgNyoayuAo tqaT/f3YTdJ4BYqdDhNg06/gEk35qqq4mpH5gVWic1j5TcyqVFFVPrzGonqdxMUcqEMdsamS uDKyq2O/2+x138FFtO/n7/nRVYBS7jUMBLmoiI+t3+K33CuDgRrukoKHKJ0hXV/011lrPgto Dl5jqFcfC9yVkH6dEvxZDEDe812FfUuFLYquhFTu+TLp6HNWyOEL/mDkCjalGDXkwp6KTgmy BAWFNwCRgvd38jtwrXlc/kyhs49FcC0M4gDvFg1mFk1Dd5+KXzCa6DD5Nse2TowgM1UAbDZf cVxhThHNk2bJUIUfAdGTshmxI9EhVGnG9FcgFKco6w6+EDWwQx33aLxdt3PdbRmQO0MxRfA+ z+ZpjyR7hcyaf6k6R633X2WheLGwhn5QK4wNOen36s/6LGU7jdPV0ZMDATTTeOCokW3XtYaL 00P5gI1vK0q/QqqSMP8Vlu2uha5UgU0XtNRF6s/5QGLx7DIpQGDCQDoUwKtdvQ96pccHj4ti GaZwdPjGwVm77KeVXS0o+L8QSyJBcQDEYMVTQMpJTbpDvHmqYA3yBfCTtBuCrLzicf6cd0R/ 9xohHRk71nwpZdbv0lewbwgq2jxzqUltiZvum3qspuNt2uUpOeNPuREE2Q3Esqs3K7CEgba5 iFb8yRvxPsIBJ+Q3COAW+gJGKqi5/+LLHXSnFN1V5gn6zm38n2/fJ5dqDdzOFV2P9wHdHfsa k+7hD68JfZ7YhOXUEOAS9jhUpt7nPm4TI2NuzK9RoMmX6WdvTSvpElGDXN8FUi3+KT1ufBgY cWoYoy3AGwECK9q6jOzSq1PmfUo3y0yjyebD5zy0x3tg/LUaW+3WIU1FgKETtk4y6eY/yTT0 dJUbPWRxztlDebRXyjw8KwoF24sE0QVP57NhvJySv+iOStjQWEoNO/Qy+gueqtjhKVkqd3L9 XCcBG5dkVr2umLaIzq0bXpmVqLjdsthpncwPAgHH1Wh6148a6mBsYYdcJoWe+E81epBlPRbc dgMS/+iMN9uFAvV3is7VobsirBieDCApxO8DwD8bBcRJ5dfFhH0oPn6dQ7RxQwyJyuQt/pmh Ya/1wneEKExdy47AOn4MPuQnk6M514Dk+dPXmzNENlZWGPo1KNIcyXRrPsGE/sgGCX55Amx9 lipWE8DhOz3vYUK3sHDhvmEo6eXAuJOJBdmMFeB34mmFxvx3zSF+pBBYtaqbDqGdWLT+YeeX 8t34cz4EsU6mAdtj9IhPZdtlbkz9vn+lY98lw5EJkjGX36vK7FnI0SF4/Vxi71w9udZlDayC 22y+Yh8GLSWOcnaPkYbCyg7Y8+ii/wFuDngws4kAUf95SVIwr2NVHtDMzLRlidYJ7pRG6Emy NcHp8Q5xVGeiB0rE9DelQFS1T2GAUIhWpUdlKMxIdHUmCty7X8aer3aKCv9wK/XWuV2KkNwf wOl3vvTtYpT1m/pUiQVF0GU+cF/mJ5XmhRB7GFaFmSzgtCf28MGhkxAww8WEDZQ4A5Mid9oG 25RMEZwG6WC0hFoiOVHXEGuAwtxPwKYyGOg12o2kHDlcGfwWlzvNGEdPcO/zHId+U9YfRlZ+ +i840ThWjDIYsrw/3UTXWhIlv/dduFypzbywJ2fI8e4HpcBcWXEhI2qbjE2sBfJO546q3DGg uhIx9xOT5PHGxQemZBmNLnC548sEEiFAEdgXcBe+Lg4GDCAWTOqhhmLBUODWuJMAP3o7X2HC 9FcFuAXcxHvxRSfjys6AJQUKOReh88Z59sle5LqK1UZsrCZkCFbjZLI+gX6h04pW99Lk/thG rjOdjmHLHOctUFUl0DJssNAHGiyOvsAWyHRw8G3978vO68YkeQxb3w37KS4j0+VPCRj4RiQm gHJPI3S7u56zLVTj5neKbpCCyq0OOHMeryxqi7riOt3bPTLLcvqnCEWoAO+Pw1pYJ0ga+4un rGJ6NPKzEfJuYgtaF/gmr6DKrJo4PujV+8GI+P1K3hnxRG5YvHO2Cda2W6EKs1uquh/t/mXH 17yLIP6cNMOQN5SyUFEcyUUQV5XF63zabymvi+n6eiFDh8GywHcMde77jnTYHpGcjMTcYjLY uMuVy1COvgDxGiNOPMFOx2iK5pxIVulXKYmcdDrqX+fFGbAbpZufFf9vUJI1N0JIiDs/AXGD VbtQxX+chmopOfP1t4xX0laoEgMFHgk6QUvVht1xjO14gxWyEYDIOQbPI8aTJZOnUQeEX0+i C7lNAMfNMk2YdiIndgQLjgussdzy9Hi4uvEGwE= IronPort-HdrOrdr: A9a23:E2kKQazgM6wlDWs0JQ4IKrPwL71zdoMgy1knxilNoG9uA6mlfq eV7ZImPH7P+VEssRQb8+xoV5PtfZqxz/5ICMwqTNOftWrd11dATrsO0WKK+VSJcBEWtNQtt5 uIGJIeNDSfNykYsS+32meFL+o= X-Talos-CUID: =?us-ascii?q?9a23=3AtAMQ/mus/EQ/MPLE/gqOEPdr6Is+LCX3l3XXfXa?= =?us-ascii?q?oV2ZjVoScFlCb5KVNxp8=3D?= X-Talos-MUID: 9a23:QlO+6AaPJEr3dOBT6h3XpBVQG8hS4KmnV3oPibkkm5ObHHkl X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="6.21,296,1763420400"; d="scan'208";a="139055710" X-MGA-submission: =?us-ascii?q?MDHu1rAxy5IIowkASHLHr2F7YRU93L+zHsNfUM?= =?us-ascii?q?rrF9KgTZKTqHgfF4Yly0xiy9y4s6eqAem0SaXiZ0w4pXHYIIUQx5SOgW?= =?us-ascii?q?n44Ti1iOpstMSDAlZJt2V+Ah2fdcfTLOjgFhdJZctRH10dAjD+ViZzkN?= =?us-ascii?q?mkQV3HS/xeAWyOQwcF62XJAg=3D=3D?= Received: from mail.mehnert.org ([213.73.89.200]) by mail3-smtp-sop.national.inria.fr with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 17 Feb 2026 15:33:43 +0100 Received: from [192.168.42.80] (i5C74C036.versanet.de [92.116.192.54]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "hannes@mehnert.org", Issuer "mehnert root CA" (not verified)) by mail.mehnert.org (Postfix) with ESMTPS id 1EBC66733 for ; Tue, 17 Feb 2026 15:33:43 +0100 (CET) Message-ID: Date: Tue, 17 Feb 2026 15:33:42 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Hannes Mehnert To: "caml-list@inria.fr" References: <82a75ba9-e897-49a1-ae9d-3bdf9cafd2fd@mehnert.org> Content-Language: en-US In-Reply-To: <82a75ba9-e897-49a1-ae9d-3bdf9cafd2fd@mehnert.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [Caml-list] OSEC-2026-01 in the OCaml runtime: Buffer Over-Read in OCaml Marshal Deserialization Reply-To: Hannes Mehnert X-Loop: caml-list@inria.fr X-Sequence: 19450 Errors-To: caml-list-owner@inria.fr Precedence: list Precedence: bulk Sender: caml-list-request@inria.fr X-no-archive: yes List-Id: List-Help: , List-Subscribe: , List-Unsubscribe: , List-Post: List-Owner: List-Archive: Archived-At: On 17/02/2026 15:26, Hannes Mehnert wrote: > published: "2026-01-24T13:30:00Z" Sorry, the date is wrong, it should be 2026-02-17. Hannes