Package: icedove
Version: 2.0.0.6-1
Severity: normal

Hello,

When Icedove tries to access an IMAP folder supporting the QUOTA extension,
an integer overflow can be triggered.

Here's a partial dump of the connection (using tcpflow) with IPs greyed
out. As you can see, the server (apparently courier-imap) reports a
negative quota, which doesn't seem to be prohibited by RFC2087 but is
indeed quite senseless.

> [client].34986-[server].00143: 29 getquotaroot "INBOX"
>
> [server].00143-[client].34986: * QUOTAROOT "INBOX" "ROOT"
> * QUOTA "ROOT" (STORAGE -14 195313 MESSAGE 9 25000)
> 29 OK GETQUOTAROOT Ok.

In about:config, my mail.quota.mainwindow_threshold.show property is set to
0.

The problem is that icedove then reports the quota as 2199018% full :
4294967282 of 195313 KB used, which is 2^32-14 (-14 for an unsigned 32bit
int).

This problem has already happened before but I never tracked down the
problem with tcpflow. I'll test the bug on Thunderbird this evening
assuming I don't receive mails on that address until then, as the quota
would probably be fixed by a change in the inbox.

Regards,
Xr

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-2-686 (SMP w/1 CPU core)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages icedove depends on:
ii  debianutils  2.25.1                      Miscellaneous utilities
specific t
ii  fontconfig   2.4.2-1.2                   generic font configuration
library
ii  libatk1.0-0  1.20.0-1                    The ATK accessibility toolkit
ii  libc6        2.6.1-1+b1                  GNU C Library: Shared
libraries
ii  libcairo2    1.4.10-1                    The Cairo 2D vector graphics
libra
ii  libfontconfi 2.4.2-1.2                   generic font configuration
library
ii  libfreetype6 2.3.5-1+b1                  FreeType 2 font engine, shared
lib
ii  libgcc1      1:4.2.2-3                   GCC support library
ii  libglib2.0-0 2.14.1-5                    The GLib library of C routines
ii  libgtk2.0-0  2.12.1-1                    The GTK+ graphical user
interface 
ii  libhunspell- 1.1.9-1                     spell checker and
morphological an
ii  libjpeg62    6b-14                       The Independent JPEG Group's
JPEG 
ii  libnspr4-0d  1.8.0.14~pre071019b-0lenny1 NetScape Portable Runtime
Library
ii  libnss3-0d   3.11.7-1                    Network Security Service
libraries
ii  libpango1.0- 1.18.2-1                    Layout and rendering of
internatio
ii  libstdc++6   4.2.2-3                     The GNU Standard C++ Library
v3
ii  libx11-6     2:1.0.3-7                   X11 client-side library
ii  libxcomposit 1:0.3.2-1+b1                X11 Composite extension
library
ii  libxcursor1  1:1.1.9-1                   X cursor management library
ii  libxdamage1  1:1.1.1-3                   X11 damaged region extension
libra
ii  libxext6     1:1.0.3-2                   X11 miscellaneous extension
librar
ii  libxfixes3   1:4.0.3-2                   X11 miscellaneous 'fixes'
extensio
ii  libxft2      2.1.12-2                    FreeType-based font drawing
librar
ii  libxi6       2:1.1.3-1                   X11 Input extension library
ii  libxinerama1 1:1.0.2-1                   X11 Xinerama extension library
ii  libxrandr2   2:1.2.2-1                   X11 RandR extension library
ii  libxrender1  1:0.9.4-1                   X Rendering Extension client
libra
ii  libxt6       1:1.0.5-3                   X11 toolkit intrinsics library
ii  psmisc       22.5-1                      Utilities that use the proc
filesy
ii  zlib1g       1:1.2.3.3.dfsg-6            compression library - runtime

icedove recommends no packages.

-- no debconf information




Reply via email to