Package: dma
Version: 0.0.2010.06.17-13
Severity: grave
Justification: makes unrelated software on the system break


dma is not able to handle the cc field (and possibly neither the
to: and bcc: fields) when multiple address are specified (comma
separated) on such field.


Take, for example the following php script:

# cat testmail.php
<?php
 $to = "testd...@mailinator.com";
 $headers  = "MIME-Version: 1.0\n";
 $headers .= "Content-Type: text/plain; charset=UTF-8;\n";
 $headers .= "From: DMA TesTeR <test...@mailinator.com>\n";
 $headers .= "To: User1 <testd...@mailinator.com>\n";
 $headers .= "Cc: User2 <testd...@mailinator.com>, User3 
<testd...@mailinator.com>\n";

 $subject = "Hi!";
 $body = "Hi,\n\nHow are you?\n";

 if (mail($to, $subject, $body, $headers)) {
   echo("Message successfully sent!\n");
  } else {
   echo("Message delivery failed...\n");
  }
?>



If you run this script with dma installed, you get a fatal error:

# php testmail.php 
sendmail: invalid recipient `'
Message delivery failed...


And the mail never is delivered.


Executing the same script on a system with another MTA (exim,
nullmailer, postfix...) works without problem.

You can check in http://www.mailinator.com if the mails were
delivered or not when testing this. You will see that with
any MTA other than dma it works without problems, but dma
fails miserably.


Since this bug potentially breaks many web applications I am
marking it as a RC bug. (I noticed this because roundcube
stopped working as expected after installing dma)


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to