https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8512
Bug ID: 8512
Summary: De-dup handler parts by their type and SHA-1 of the
whole content
Product: Spamassassin
Version: 4.0.3
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P2
Component: Libraries
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: Undefined
Created attachment 6214
--> https://bz.apache.org/SpamAssassin/attachment.cgi?id=6214&action=edit
De-dup handler parts by their type and SHA-1 of the whole content
The handler framework's skip of duplicate parts uses a simple check that allows
easy evasion of scanning of archive members with the same length and first 64
bytes, since all archive members are declared application/octet-stream.
The attached patch uses the type the part is handled as, which comes from the
file name, instead of the declared type, and SHA-1 of the whole content instead
of the length and first 64 bytes. The type change is needed when a decoy has
the same content as the file, such as a readme.txt that is a copy of a .js, or
a rar folder entry, which with RARLAB's unrar has the same content as the file
in the folder. It also adds two test cases to t/handler_archive.t.
--
You are receiving this mail because:
You are the assignee for the bug.
