[Dovecot] 1.1.5 abort with mal-formed address in header
Hi An email with a mal-formed address in a header like: To:(receiver@domain.com (Starting with a comment, with no closing ')' ) causes dovecot 1.1.5 to panic and abort. This is similar to the problem fixed by: http://hg.dovecot.org/ dovecot-1.1/rev/04fdaa2f831e This patch seems to resolve the problem: --- dovecot-1.1.5/src/lib-mail/message-address.c.orig 2008-10-23 22:17:10.243827000 +0000 +++ dovecot-1.1.5/src/lib-mail/message-address.c 2008-10-23 22:20:20.050173000 +0000 @@ -315,7 +315,7 @@ ctx.fill_missing = fill_missing; ret = rfc822_skip_lwsp(&ctx.parser); - if (ret == 0) { + if (ret <= 0) { /* no addresses */ return NULL; } Richard Platel rplatel@tucows.com
On Oct 24, 2008, at 1:49 AM, Richard Platel wrote:
To:(receiver@domain.com
(Starting with a comment, with no closing ')' ) causes dovecot 1.1.5
to panic and abort.This is similar to the problem fixed by: http://hg.dovecot.org/dovecot-1.1/rev/04fdaa2f831e
This patch seems to resolve the problem:
Thanks, committed. I guess it's time for 1.1.6 release.. I'll leave it
for tomorrow.
On Friday 24 of October 2008, Timo Sirainen wrote:
On Oct 24, 2008, at 1:49 AM, Richard Platel wrote:
To:(receiver@domain.com
(Starting with a comment, with no closing ')' ) causes dovecot 1.1.5 to panic and abort.
This is similar to the problem fixed by: http://hg.dovecot.org/dovecot-1.1/rev/04fdaa2f831e
This patch seems to resolve the problem:
Thanks, committed. I guess it's time for 1.1.6 release.. I'll leave it for tomorrow.
Ping? :-)
-- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/
participants (3)
-
Arkadiusz Miskiewicz
-
Richard Platel
-
Timo Sirainen