on signed char arch. http://www.fetchmail.info/fetchmail-SA-2010-01.txt "This might be exploitable to inject code if - - fetchmail is run in verbose mode AND - - the host running fetchmail considers char signed AND - - the server uses malicious certificates with non-printing characters that have the high bit set AND - - these certificates manage to inject shell-code that consists purely of printable characters. It is believed to be difficult to achieve all this."