On Fri, 2009-05-22 at 12:37 +0100, Ned Slider wrote: > Karsten Bräckelmann wrote:
> > Can you ask the sender to generate samples? No sensitive content, and > > the email address most likely can be masked by you. Just be sure to not > > invalide any other data. Might require sending at different times. > > Good idea, but I'm afraid I'm not in a position to do that either - > sorry. I know I'm not giving much to go by here and I apologise for > that. I'll zip up the 7 samples I have and send them to you off list if > you would like to look at them. If this is inappropriate, please feel > free to file in /dev/null! Thanks for trusting me, Ned -- and the additional workload. ;) The above wasn't meant as an invitation to send the samples my way. ;) Anyway, just had a look at them and spotted the oddity that triggers the FP. Should be quite easy to work around this specific issue with a hot-fix. Following up off-list, to maybe gather some more info. Currently looks like neither the admin nor the user knows how to reliably reproduce it -- and the issue appears to happen at random. If you can reproduce... Anyone else samples? ;) Possibly generated specifically for that very purpose. Feel free to send 'em to me privately. > > Did you check Bugzilla? > > https://issues.apache.org/SpamAssassin/ > > In particular, check the Message-Id headers of your samples, and compare > > them against those mentioned to FP. > > No, not yet, but I will do. Thank you for the advice :-) Actually, what I extracted from the samples does NOT look like anything I recall having seen in bugzilla. Probably no one filed one, cause they haven't been able to reproduce at will. guenther -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}