v2.2.27 Panic: file rfc822-parser.h: line 23 (rfc822_parser_deinit): assertion failed: (ctx->data <= ctx->end)

[Jason Lewis]

Thanks Timo.

Given the age of these dovecot packages, and this being on debian
oldstable, what should we do next? I'm inclined to just delete the email
in question and move on.

Jason

Timo Sirainen wrote on 28/3/19 12:16 am:
> On 27 Mar 2019, at 1.25, Jason Lewis via dovecot <dovecot at dovecot.org> wrote:
>>
>> Hi Aki,
>>
>> debian jessie backports has been moved to archive.debian.org and
>> initially I was unable to install dovecot-dbg because of that. But I've
>> managed to resolve that issue now.
>>
>> This was the command I ran:
>> doveadm -D -f flow fetch imap.envelope mailbox crm-spam.2008.g
>>
>> Backtrace follows.
> 
> I've a feeling Debian's security fix backports didn't work properly:
> 
>> #5  0x00007f3a7c34a97d in rfc822_parser_deinit (ctx=0x7ffdc7615e38,
>> ctx=0x7ffdc7615e38) at rfc822-parser.h:23
> 
> rfc822_parser_deinit() wasn't added until v2.2.31. I think it was added as part of a security fix.
> 
>>    data=data at entry=0x5563c13f3910 "To: bluefrog at dickson.st,
>> jason at dickson.st, lewisjason at dickson.st, 05 Jul 2008 16:39:47 -0500
>> PDT6Q--q=dns; c=nofws;d sender)
>> smtp.mail=Matt_Cooley at postnewsweektech.com; domainkeys=pass (test mode)
>> hea"..., size=size at entry=64,
> 
> I tried fetching a mail with these contents in v2.2.27, v2.2.33 and master. They all worked fine.
> 

-- 
Jason Lewis
http://emacstragic.net