[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: router segfault on empty envelope "with"



On Tue, May 20, 2003 at 03:10:36PM +0400, Eugene Crosser wrote:
> I don't know whose exactly fault it is, but somehow I got a message in
> the router queue that had empty value for "with" envelope element.  This
> sould have been filled in smtpserver/smtpcmds.c line 976 (assuming that
> the message was received by SMTP).
> 
> Anyway, this message caused repetitive router process failure at
> router/rfc822.c line 1247 because h is non-null, but the structure that
> it points to is null, and thus h->h_contents.a->a_tokens points into
> page zero.

    h->h_contents.a  is NULL value  -->  referral to  a_tokens  faults.

    You can trivially cause this with:

       /usr/lib/sendmail -p '' recipient@addres


    I have now added couple tests into relevant places to eliminate
    core-drop possibility.

> Zmailer version is the latest CVS of course, OS is Linux 2.4.20.
> Eugene
-- 
/Matti Aarnio	<mea@nic.funet.fi>
-
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi