Sam Varshavchik wrote:
> Tetsuo Handa writes:
> 
> > Then, I think that my case ( /usr/lib/courier-imap/bin/imapd process 
> > crashes  
> > by
> > memory corruption; valgrind reports off-by-a-few-bytes ) should be 
> > considered
> > as a bug of courier-imap when a bogus 0xe3 is located at the tail of a mail
> > address (e.g. <someb...@example.com\\xe3> ) within the header lines.
> >
> > I\'ll try to develop an example reproducer for bug reporting.
> 
> You should try to capture the exact IMAP commands too. I cannot reproduce  
> your crash, at least with the current version of Courier-IMAP, with FETCH  
> (ENVELOPE), which would be the likely culprit.

I can reproduce the crash (both courier-imap-4.9.3 and courier-imap-4.12.0)
on CentOS 6.3 with below steps.

Regards.

$ rm -fR ~/Maildir/
$ /usr/lib/courier-imap/bin/maildirmake ~/Maildir
$ cat > ~/Maildir/new/00000000 << \"EOF\"
Return-Path: <r...@example.com>
Delivered-To: r...@example.com
Message-Id: <00000...@example.com>
From: r...@example.com
To: root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>, root <root@example.com_>, root 
<root@example.com_>, root <root@example.com_>
Subject: test message
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;

test message
EOF
$ LANG=C sed -i -e \'s/_/\'`echo -ne \'\\xe3\'`\'/g\' -- ~/Maildir/new/00000000
$ awk \' BEGIN { print \"1 select inbox\"; for (num = 2; num <= 1000; num++) 
print num \" uid search header Return-Path <r...@example.com>\" }\' | valgrind 
/usr/lib/courier-imap/bin/imapd ~/Maildir/

Attachment: steps.txt
Description: Binary data

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Courier-imap mailing list
Courier-imap@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to