[exim-dev] [Bug 2606] New: Segfault in sqlite lookup with invalid sqlite_dbfile
https://bugs.exim.org/show_bug.cgi?id=2606
Bug ID: 2606
Summary: Segfault in sqlite lookup with invalid sqlite_dbfile
Product: Exim
Version: 4.94
Hardware: x86-64
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Lookups
Assignee: unalloca...@exim.org
Reporter: jh.exim-bugzi...@plonk.de
CC: exim-dev@exim.org
If sqlite_dbfile is empty, not set or set to an invalid path like " = bla" or "
= $spool_directory/grey.sqlite" (it's not expanded), a segfault occurs:
Example (using exim-4.94-1.fc32.x86_64 from Fedora 32):
# echo '${lookup sqlite {select * from bla}}' | exim -d+expand -be
Exim version 4.94 uid=0 gid=0 pid=236658 D=f7715dfd
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc OpenSSL
Content_Scanning DANE DKIM DNSSEC Event OCSP PIPE_CONNECT PRDR PROXY SOCKS SPF
DMARC TCP_Fast_Open
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz
dbmnz dnsdb dsearch ldap ldapdn ldapm nis nis0 nisplus passwd sqlite
Authenticators: cram_md5 cyrus_sasl dovecot gsasl plaintext spa tls
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Malware: f-protd f-prot6d drweb fsecure sophie clamd avast sock cmdline
Fixed never_users: 0
Configure owner: 0:0
Size of off_t: 8
Compiler: GCC [10.1.1 20200507 (Red Hat 10.1.1-1)]
Library version: Glibc: Compile: 2.31
Runtime: 2.31
...
Library version: SQLite: Compile: 3.31.1
Runtime: 3.32.2
...
> âconsidering: ${lookup sqlite {select * from bla}}
âconsidering: select * from bla}}
âââexpanding: select * from bla
â°âââââresult: select * from bla
search_open: sqlite "NULL"
Segmentation fault
--
You are receiving this mail because:
You are on the CC list for the bug.--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim
details at http://www.exim.org/ ##
[exim-dev] [Bug 2605] $domain_data is not expanded during event_action
https://bugs.exim.org/show_bug.cgi?id=2605 --- Comment #2 from Daan van Gorkum --- Sorry, I just noticed I omitted some information. This happens in the "appendfile" driver. Other places in the same driver/transport $domain_data does work, that's why I was under the impression it should work. Also shouldn't it be safer to $domain_data instead of $domain with the recent introduced taints? -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[exim-dev] [Bug 2265] TLS SNI not auto-set for DANE clients
https://bugs.exim.org/show_bug.cgi?id=2265 --- Comment #7 from Jeremy Harris --- Seems plausible; all we need is for someone to put in the coding and testing effort. -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[exim-dev] [Bug 2597] LDAP lookup in smtp_accept_max_per_host does not close file descriptor
https://bugs.exim.org/show_bug.cgi?id=2597 Jeremy Harris changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|--- |FIXED --- Comment #3 from Jeremy Harris --- Lacking a response I'll assume yes, and close. -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[exim-dev] [Bug 2604] exim does not send DATA to target host when verify callout hold and delivery cutthrough
https://bugs.exim.org/show_bug.cgi?id=2604 Git Commit changed: What|Removed |Added CC||g...@exim.org --- Comment #11 from Git Commit --- Git commit: https://git.exim.org/exim.git/commitdiff/99bfcf2b678e7bd8125a7eb44409e46549bfc111 commit 99bfcf2b678e7bd8125a7eb44409e46549bfc111 Author: Jeremy Harris AuthorDate: Mon Jun 22 17:27:18 2020 +0100 Commit: Jeremy Harris CommitDate: Mon Jun 22 17:32:22 2020 +0100 cutthrough: handle request when a callout-hold is active. bug 2604 doc/doc-txt/ChangeLog | 4 src/src/acl.c | 50 +-- src/src/verify.c | 4 ++-- test/confs/5409 | 46 +++ test/log/5409 | 3 +++ test/scripts/5400-cutthrough/5409 | 29 +++ test/stdout/5409 | 40 +++ 7 files changed, 151 insertions(+), 25 deletions(-) -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[exim-dev] [Bug 2604] exim does not send DATA to target host when verify callout hold and delivery cutthrough
https://bugs.exim.org/show_bug.cgi?id=2604 Jeremy Harris changed: What|Removed |Added Status|NEW |ASSIGNED Assignee|unalloca...@exim.org|jgh146...@wizmail.org Version|N/A |4.92 --- Comment #10 from Jeremy Harris --- For interest, there was already a testcase in the suite for the opposite order: acl_rcpt: accept control = cutthrough_delivery verify = recipient/callout=use_sender -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[exim-dev] [Bug 2605] $domain_data is not expanded during event_action
https://bugs.exim.org/show_bug.cgi?id=2605 --- Comment #1 from Jeremy Harris --- Depending on where you are causing $domain_data to be created, it may not be available to the process where that specific event (msg:delivery) is raised. This is unlikely to be changed. -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[exim-dev] The Router part execute twice
I have written a router and transport with the keyword unseen The source is; relay_by_vps: debug_print = "R: Relaying by vps for $domain" driver = manualroute domains = ! +local_domains same_domain_copy_routing = yes route_data = vps.lesve.org::587 transport = remote_smtp_smarthost headers_remove = X-Interface: X-Remote: X-Helo unseen save_to_mailbox: debug_print = "R: save_to_mailbox" driver = manualroute domains = ! +local_domains transport = maildir_lesve user = lesve route_data = lesve maildir_lesve: debug_print = "T: maildir_home for user lesve" driver = appendfile directory = /home/lesve/Maildir/.Sent create_directory delivery_date_add envelope_to_add return_path_add maildir_format So to the problem: The email is copied twice to the maildir But when a try to debug it with the -d it will work with one delivery to maildir /LeSve -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
