Hi Demi,

On Sat, Jul 30, 2022 at 5:16 AM Demi Marie Obenour
<demioben...@gmail.com> wrote:
>
> On 7/26/22 21:24, Jason A. Donenfeld wrote:
> > This appears rather easy to reproduce. Just include the char 0x0c in a
> > message, and the signature will be invalid. Playing with the resultant
> > message, I can make it valid by removing the \x0c character,
> > suggesting that it's being stripped from whatever rspamd receives for
> > signing.
>
> I suspect the problem is that \x0c is a space character (according to
> isspace(3), but is *not* \x20, \n, or \r.

Right, that was my guess too, though I didn't see anything too wrong
in opensmtpd itself, nor in the Golang scanner interface used by
filter-rspamd. So that means the issue might be in rspamd? But I
haven't tried to isolate that yet.

>  What OS are you using?

Linux.

Jason

Reply via email to