Re: [Imap-uw] Problem deleting folders with Thunderbird
On Thu, 14 May 2009, Brian Hayden wrote: Just to be explicit, the moral of the story is that using subscriptions is not a good idea because every client is stupid in their handling of subs, and worse, they're all stupid in slightly different ways. Correct. The ONLY valid use for subscriptions is if a server exports netnews groups or similar functionality. This allows the user to keep a list of which newsgroups he is subscribed to. Now that netnews is effectively dead, the purpose and use of IMAP subscriptions should die with it. Any client which do a LIST * and subscribe all the names returned is broken by design. This means you, Outlook and Thunderbird. That practice is completely unnecessary, and is based upon false folklore. -- Mark -- http://panda.com/mrc Democracy is two wolves and a sheep deciding what to eat for lunch. Liberty is a well-armed sheep contesting the vote. ___ Imap-uw mailing list Imap-uw@u.washington.edu http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
Re: [Imap-uw] Problem deleting folders with Thunderbird
On May 14 2009, Mark Crispin wrote: On Thu, 14 May 2009, Andrew Daviel wrote: 5 unsubscribe "Trash/test/" 5 NO Not subscribed to mailbox Trash/test/ - at this point, Trash/test/ has disappeared from the filesystem, but there is still an entry Trash/test in .mailboxlist. Look at the above very carefully. imapd says that Trash/test/ is not subscribed. The .mailboxlist file shows that Trash/test is subscribed. Note the difference in the two strings. Just to be explicit, the moral of the story is that using subscriptions is not a good idea because every client is stupid in their handling of subs, and worse, they're all stupid in slightly different ways. -Brian ___ Imap-uw mailing list Imap-uw@u.washington.edu http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
Re: [Imap-uw] Problem deleting folders with Thunderbird
On Thu, 14 May 2009, Andrew Daviel wrote: 5 unsubscribe "Trash/test/" 5 NO Not subscribed to mailbox Trash/test/ - at this point, Trash/test/ has disappeared from the filesystem, but there is still an entry Trash/test in .mailboxlist. Look at the above very carefully. imapd says that Trash/test/ is not subscribed. The .mailboxlist file shows that Trash/test is subscribed. Note the difference in the two strings. -- Mark -- http://panda.com/mrc Democracy is two wolves and a sheep deciding what to eat for lunch. Liberty is a well-armed sheep contesting the vote. ___ Imap-uw mailing list Imap-uw@u.washington.edu http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
Re: [Imap-uw] Problem deleting folders with Thunderbird
On Thu, 2009-05-14 at 12:17 -0700, Andrew Daviel wrote: > 5 unsubscribe "Trash/test/" > 5 NO Not subscribed to mailbox Trash/test/ > 6 logout .. > https://bugzilla.mozilla.org/show_bug.cgi?id=357911 > I submitted 414101 now marked as a duplicate I've also had https://bugzilla.mozilla.org/show_bug.cgi?id=301714 open for a while. signature.asc Description: This is a digitally signed message part ___ Imap-uw mailing list Imap-uw@u.washington.edu http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
[Imap-uw] Problem deleting folders with Thunderbird
We have a problem with users trying to delete folders using Thunderbird. Part of it is a TB problem IMO (some discussion with Mark a while back; TB is trying to delete an open folder without deselecting it). However, another issue seems to be that imapd is not unsubscribing from the deleted folder properly from network capture: 3 list "" "Trash/test/*" * LIST (\HasNoChildren) "/" Trash/test/ 3 OK LIST completed 4 delete "Trash/test/" 4 OK DELETE completed 5 unsubscribe "Trash/test/" 5 NO Not subscribed to mailbox Trash/test/ 6 logout - at this point, Trash/test/ has disappeared from the filesystem, but there is still an entry Trash/test in .mailboxlist. Thunderbird seems to ignore error status and thinks it has successfully unsubscribed - the icon disappears. But after exiting and restarting (logging in again), the icon reappears pointing to a mailbox that cannot be selected. imapd-2007, as I recall https://bugzilla.mozilla.org/show_bug.cgi?id=357911 I submitted 414101 now marked as a duplicate -- Andrew Daviel, TRIUMF, Canada Tel. +1 (604) 222-7376 (Pacific Time) Network Security Manager ___ Imap-uw mailing list Imap-uw@u.washington.edu http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
Re: [Imap-uw] Possible buffer overflow in mailutil
Thank you for reporting this. This is only an issue in glibc2 on some Linux systems. In other C libraries, the data returned by getpass() is limited to PASS_MAX. The author of glibc2 apparently thought that it would help his ideology to abolish the use of such functions by making glibc2's getpass() return a limitless string. Since mailutil is an auxillary shell tool and not a security program, I don't think that there is a particular priority to protect it from user abuse. -- Mark -- http://panda.com/mrc Democracy is two wolves and a sheep deciding what to eat for lunch. Liberty is a well-armed sheep contesting the vote. ___ Imap-uw mailing list Imap-uw@u.washington.edu http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
[Imap-uw] Possible buffer overflow in mailutil
I wrote a private patch to provide my own (none interactive)
username/password method for the tool "mailutil" which is part of
imap-2007e and alpine-2.00.
During my tests I found, that the function mm_login in
imap-2007e/src/mailutil/mailutil.c:883 has a bug:
void mm_login (NETMBX *mb,char *username,char *password,long trial)
{
char *s,tmp[MAILTMPLEN];
sprintf (s = tmp,"{%s/%s",mb->host,mb->service);
if (*mb->user) sprintf (tmp+strlen (tmp),"/user=%s",
strcpy (username,mb->user));
if (*mb->authuser) sprintf (tmp+strlen
(tmp),"/authuser=%s",mb->authuser);
if (*mb->user) strcat (s = tmp,"} password:");
else {
printf ("%s} username: ",tmp);
fgets (username,NETMAXUSER-1,stdin);
username[NETMAXUSER-1] = '\0';
if (s = strchr (username,'\n')) *s = '\0';
s = "password: ";
}
strcpy (password,getpass (s));
}
The password returned by getpass(s) could be longer than the buffer
password. Password has a fixed size buffer pwd[MAILTMPLEN]. MAILTMPLEN
is 1024 by default.
So it's easy to see the problem:
$ imap-2007e/mailutil/mailutil check '{myimapserver}INBOX'
{myimapserver} username: myusername
password: (type in or copy a text line with > 1024 characters)
Speicherzugriffsfehler (core dumped)
The easiest way to fix the problem is probably to use strncpy instead of
strcpy.
Greetings,
Björn
___
Imap-uw mailing list
Imap-uw@u.washington.edu
http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
