Hi, all.

I found problems that overrun buffer when reading from socket in
amavis-milter.c.

I'm using amavisd and amavis-milter following environment.

        $ uname -mrs
        FreeBSD 7.0-STABLE amd64
        $ amavisd -V
        amavisd-new-2.6.0 (20080423)
        $ sendmail -d0,1
        Version 8.14.2

        I installed amavisd-new from FreeBSD port system
        (security/amavisd-new: amavisd-new-2.6.0_1,1).

        and I use amavis-milter with sendmail via milter.

### Abstrct ###

The sendmail sometimes can not receives email via smtp and submission,
because the amavis-milter sometimes returns TEMPFAIL. 


### Description ###

The amavisd sends return value "0", and The amavis-milter receives it.
But the amavis-milter doesn't add and check null-terminator. therefore,
it will read a return value added undefined-value using atoi().

I don't know whether the send() function should add null terminator in
perl specification. but perl in the my environment does not add null
terminater when sending data. therefore the amavisd send "0" as success
value, but amavis-milter does not understand as success.


I think that the receiver should support unexpected value.

I attached patch for this problem.

Best regards.

-- 
Shin-ichi Nagamura <[EMAIL PROTECTED]>
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to