- check Maildir for not being NULL when expanding '='-paths - prevent mailto parsing buffer overflow by ignoring too long header - use strtok_r() to parse mailto: links, not strtok() - update UPDATING