pcre security issues

[javelin]

http://www.frsirt.com/english/advisories/2007/3725

pcre 6.x is likely vulnerable to malformed regexes allowing people to execute arbitrary code. Penn should probably update its internal pcre and/or see if it's possible to just link against a system's pcre library so that chasing these kind of security fixes becomes the OS's problem (which it already is) alone.

[raevnos]

I think it is difficult to the point of impossibility to get a string that ends up being valid binary opcodes through the isprint() checks (But not completely impossible; I've seen an example using utf-8, just not latin-1). Still a good idea.

Checked in a test for a system libpcre. Using it, size of the netmud binary is ~100K smaller.

Still to do: Update the bundled pcre.