https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7176

            Bug ID: 7176
           Summary: Content-Disposition filename parser space handling
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Hardware: All
                OS: All
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Libraries
          Assignee: [email protected]
          Reporter: [email protected]

Sample of real spam:

 Content-Disposition: attachment; filename= "xyzzy.zip"

Parser doesn't read the filename since it doesn't expect spaces (Message.pm ->
_parse_normal):

  if ($disp =~ /name="?([^\";]+)"?/i) {
    $msg->{'name'} = $1;

If we look at the Content-Type parser, it does handle spaces (Util.pm ->
parse_content_type):

  my($name) = $ct =~ /\b(?:file)?name\s*=\s*["']?(.*?)["']?(?:;|$)/i;


So any reason not to change the C-D regex identical to C-T?

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to