[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Router crash




  It appears that the router will crash if any header entry exceeds 100000
characters.  I've tested this on 2.99.27 and 2.99.39, and it causes a
total router failure.

  scan882() in rfc822scan.c calls copyToken() 

  In lib/token.c, copyToken(), there is the following code:

	if (ct->t_len > 100000)
		abort();

  When scan882() in rfc822scan.c calls copyToken() on line 344, and
scan822 has been scanning a very long header entry, will the router to
abort.

  copyToken should return a error result rather than aborting, and the
message file should be re-linked into $POSTOFFICE/postman  Also, the limit
of 100000 seems to be a bit small.  The router should be able to handle
headers entries at least double that.

  I will send anyone who asks a copy of message that has a very long
(over 200000 characters), continued To: entry to test this with.

Tom