Your message dated Mon, 04 Dec 2006 11:47:06 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#361354: fixed in mailutils 1:1.1+dfsg1-3.1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: mailutils-imap4d
Version: 1:0.6.1-4sarge2
Severity: grave
Justification: renders package unusable


I use imap4d using a traditional /var/spool/mail source (and don't use
folders or any of that fancy stuff); I just use it as a POP replacement
with gnus running gssapi as the authentication.

If the mailbox contains a message with an ASCII NUL (000) character,
then the reply to a FETCH command (at least, those generated by gnus,
such as:
30 UID FETCH 27 BODY.PEEK[]

will print a correct message count in {} in the reply, but then in the
message itself, printing of the message will stop with the character
before the ASCII NUL, and then the terminating ) is printed, followed
by
30 OK UID FETCH Completed

The problem seems pretty obvious: the code that reads and prints the
message into the reply is fooled by NULs because it is using C strings
to hold the data.

I have marked this bug report grave because spam is extremely common in
this sad world, and spam often includes such NUL characters.  This
prevents the use of imap4d with any such mail spool, rendering the
tool unusable.

In the message where I saw this, the NUL character was within a MIME
block, with type text/plain and encoding base64; the NUL occurred at the
end of the last line of the block, before the concluding boundary line.

The problem occurs as well if a "FETCH 27 BODY[TEXT]" command is used
(not surprisingly).

Clearly the bug is in fetch_io, in imap4d/fetch.c.  We are called from
fetch_operation, where there is no partial offset, so start and end are
ULONG_MAX.  The first main loop for fetch_io is the one chosen, and max
is set correctly (because the size printed between {} I know to be
correct).  Then we read chunks of 512 bytes at a time, and use util_send
to output them.  util_send cannot deal with chunks that have embedded
NULs.

pop3d is apparently able to handle the messages correctly.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.27-2-386
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages mailutils-imap4d depends on:
ii  libc6                  2.3.2.ds1-22      GNU C Library: Shared libraries an
ii  libcomerr2             1.37-2sarge1      common error description library
ii  libgcrypt11            1.2.0-11.1        LGPL Crypto library - runtime libr
ii  libgdbm3               1.8.3-2           GNU dbm database routines (runtime
ii  libgnutls11            1.0.16-13.2       GNU TLS library - runtime library
ii  libgpg-error0          1.0-1             library for common error values an
ii  libgsasl7              0.2.5-1           GNU SASL library
ii  libidn11               0.5.13-1.0        GNU libidn library, implementation
ii  libkrb53               1.3.6-2sarge2     MIT Kerberos runtime libraries
ii  libmailutils0          1:0.6.1-4sarge2   GNU Mail abstraction library
ii  libmysqlclient12       4.0.24-10sarge1   mysql database client library
ii  libpam0g               0.76-22           Pluggable Authentication Modules l
ii  libtasn1-2             0.2.10-3sarge1    Manage ASN.1 structures (runtime)
ii  netbase                4.21              Basic TCP/IP networking system
ii  zlib1g                 1:1.2.2-4.sarge.2 compression library - runtime

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: mailutils
Source-Version: 1:1.1+dfsg1-3.1

We believe that the bug you reported is fixed in the latest version of
mailutils, which is due to be installed in the Debian FTP archive:

libmailutils-dev_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/libmailutils-dev_1.1+dfsg1-3.1_amd64.deb
libmailutils1_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/libmailutils1_1.1+dfsg1-3.1_amd64.deb
mailutils-comsatd_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/mailutils-comsatd_1.1+dfsg1-3.1_amd64.deb
mailutils-imap4d_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/mailutils-imap4d_1.1+dfsg1-3.1_amd64.deb
mailutils-mh_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/mailutils-mh_1.1+dfsg1-3.1_amd64.deb
mailutils-pop3d_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/mailutils-pop3d_1.1+dfsg1-3.1_amd64.deb
mailutils_1.1+dfsg1-3.1.diff.gz
  to pool/main/m/mailutils/mailutils_1.1+dfsg1-3.1.diff.gz
mailutils_1.1+dfsg1-3.1.dsc
  to pool/main/m/mailutils/mailutils_1.1+dfsg1-3.1.dsc
mailutils_1.1+dfsg1-3.1_amd64.deb
  to pool/main/m/mailutils/mailutils_1.1+dfsg1-3.1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Barth <[EMAIL PROTECTED]> (supplier of updated mailutils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon,  4 Dec 2006 11:21:05 +0000
Source: mailutils
Binary: mailutils-mh mailutils-imap4d mailutils-comsatd mailutils-pop3d 
libmailutils-dev mailutils libmailutils1
Architecture: source amd64
Version: 1:1.1+dfsg1-3.1
Distribution: unstable
Urgency: high
Maintainer: Jordi Mallach <[EMAIL PROTECTED]>
Changed-By: Andreas Barth <[EMAIL PROTECTED]>
Description: 
 libmailutils-dev - Development files for GNU mailutils
 libmailutils1 - GNU Mail abstraction library
 mailutils  - GNU mailutils utilities for handling mail
 mailutils-comsatd - GNU mailutils-based comsatd daemon
 mailutils-imap4d - GNU mailutils-based IMAP4 Daemon
 mailutils-mh - GNU mailutils-based MH utilities
 mailutils-pop3d - GNU mailutils-based POP3 Daemon
Closes: 361354
Changes: 
 mailutils (1:1.1+dfsg1-3.1) unstable; urgency=high
 .
   * Non-maintainer upload.
   * Fix issue with mails containing \0. Thanks to Ben Hutchings for
     the patch. Closes: #361354
Files: 
 983b0fdd9fbd294f511353ebd58a3a8d 1024 libs optional mailutils_1.1+dfsg1-3.1.dsc
 2114fe13d36e897577f0d6dd3977c825 21260 libs optional 
mailutils_1.1+dfsg1-3.1.diff.gz
 7e4950d3e1108589e5d63acc7408a349 724494 libs optional 
libmailutils1_1.1+dfsg1-3.1_amd64.deb
 52a25ba1a6e21c67981506e6c60f80fa 537892 libdevel optional 
libmailutils-dev_1.1+dfsg1-3.1_amd64.deb
 8390aa5a43fdbc04f717ed4bc9b8d5cf 313030 mail optional 
mailutils_1.1+dfsg1-3.1_amd64.deb
 46211340ae840d97174c271562bba9a6 121194 net optional 
mailutils-imap4d_1.1+dfsg1-3.1_amd64.deb
 6b99dbbe9f047b7814f584283f54bfb7 103546 net optional 
mailutils-pop3d_1.1+dfsg1-3.1_amd64.deb
 e174aa3f91e3ab937437b2433a8c45f4 87088 net optional 
mailutils-comsatd_1.1+dfsg1-3.1_amd64.deb
 024a1527b6615698371af31a886bbbf1 1012676 mail optional 
mailutils-mh_1.1+dfsg1-3.1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFFdAeHmdOZoew2oYURAnGeAKCy0oqNBjjgRdomSCfWX3XFBA05HQCfSlge
ytOM8KKxJ0JSw3nCikIpOQ4=
=ee/g
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to