Re: mailsploit fixes

2018-01-10 Thread Maxim Masiutin
Hello Dimitar,

We have always made The Bat! in such a way that you may not run older versions 
over the message base files or configuration files or address book made by 
newer versions. We discourage this practice, and you will not be able to do any 
rebuild or otherwise make both versions work at the same time with the same 
data.

-- 
Best regards,
Maxim Masiutin
Director
Ritlabs, SRL
www.ritlabs.com



 Current beta is 8.0.18.2 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: mailsploit fixes

2018-01-10 Thread Dimitar Tomov
On Tuesday, January 9, 2018, 11:52:16 PM, you wrote:

> Hello,

> Please note that most of the mailsploit fixes will help for the new
> messages only. For the messages that are already received, there are
> already invalid data stored in the message base index files.
> However, you would be able to update it by re-building index
> information for theese messages, e.g., by moving them to another folder.

> The header line decoder in The Bat! was not context aware. It did
> decode instances of the RFC-2047 "encoded-word" regardless of the
> context. However, section 5 of this RFC states that an
> "encoded-word" may only be processed (decoded) in certain context,
> and according to certain specific rules. Moreover, section 5 of the
> RFC explicitly specifies that an "encoded-word" MUST NOT appear in
> any portion of an 'addr-spec' (i.e. an email address).

> We have reworked lots of code in The Bat! to make the header decoder 
> context-aware.

> Besides making the header line decoder context aware, we have also
> made the following checks in the display name part of an address: if
> it contains an "@" character or any control character (with code
> less than code of a space character), then such a name part is discarded.




Dear Maxim,

I received email with TB 8.0.18.2, then exited TB and opened TB 7 on
the same message base. The message list shows this message without
sender and recipient (columns From and To are empty). This does not
change when I move the message to another folder.
Opening the same base again with TB 8, shows correct (populated)
columns From and To.

The message preview panel shows correct From and To headers.

Is the "index re-building" not working in TB 7 or is there a manual
way to invoke it?

Best regards,
 Dimitar  mailto:dito...@gmail.com



 Current beta is 8.0.18.2 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: mailsploit fixes

2018-01-09 Thread Stuart Pye
Hello Maxim,

Tuesday, January 9, 2018, 4:52:16 PM, you wrote:

MM> Hello,

MM> Please note that most of the mailsploit fixes will help for the
MM> new messages only. For the messages that are already received,
MM> there are already invalid data stored in the message base index
MM> files. However, you would be able to update it by re-building
MM> index information for theese messages, e.g., by moving them to another 
folder.

SP>>  All 14 mailsploit tests passed. Congrats!




Best regards,

Stuart Pye


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus



 Current beta is 8.0.18.2 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


mailsploit fixes

2018-01-09 Thread Maxim Masiutin
Hello,

Please note that most of the mailsploit fixes will help for the new messages 
only. For the messages that are already received, there are already invalid 
data stored in the message base index files. However, you would be able to 
update it by re-building index information for theese messages, e.g., by moving 
them to another folder.

The header line decoder in The Bat! was not context aware. It did decode 
instances of the RFC-2047 "encoded-word" regardless of the context. However, 
section 5 of this RFC states that an "encoded-word" may only be processed 
(decoded) in certain context, and according to certain specific rules. 
Moreover, section 5 of the RFC explicitly specifies that an "encoded-word" MUST 
NOT appear in any portion of an 'addr-spec' (i.e. an email address).

We have reworked lots of code in The Bat! to make the header decoder 
context-aware.

Besides making the header line decoder context aware, we have also made the 
following checks in the display name part of an address: if it contains an "@" 
character or any control character (with code less than code of a space 
character), then such a name part is discarded.


-- 
Best regards,
Maxim Masiutin
Director
Ritlabs, SRL
www.ritlabs.com



 Current beta is 8.0.18.1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html