On Thu, 16 Aug 2012, Kevin A. McGrail wrote:
On 8/15/2012 6:08 PM, John Evans wrote:
I added the patch and it hung in the same place. The 'spamassassin -D -t <
bad' command eventually went through after a LONG timeout. I didn't
capture the results of the SA command (forgot to redirect output), but the
patch to substr(X, 0, 30000) didn't seem to help any. Could be that 30,000
is too long? That delves deep into the attachment, and I'm wondering if
the top-end of the attachment (within that 30k range) has content that
triggers a regex that doesn't like what it sees?
Just throwing some ideas out there.
Thoughts?
Henrik wrote the patch which I have not reviewed (or don't remember
reviewing) but as noted, we are flying a bit blind. We are guessing the
issue is a wrong MIME type in the container of the email.
I could argue such a malformed message is a danger to any system and you
should use glue to discard the message.
But without seeing the message, I really can't expend much time on this
shotgun approach.
I recommend you ask the sender if it's ok to send the email to
priv...@spamassassin.apache.org so at least the PMC members can look at it.
...or see if the sender can compose and email a RTF contract with similar
but invented details. If that triggers the bug then it would be easier to
provide that as evidence.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Men by their constitutions are naturally divided in to two parties:
1. Those who fear and distrust the people and wish to draw all
powers from them into the hands of the higher classes. 2. Those who
identify themselves with the people, have confidence in them,
cherish and consider them as the most honest and safe, although not
the most wise, depository of the public interests.
-- Thomas Jefferson
-----------------------------------------------------------------------
8 days until the 1933rd anniversary of the destruction of Pompeii
