On 8/6/2010 12:18 PM, Randy Ramsdell wrote:
> Ralf Hildebrandt wrote:
>> * Randy Ramsdell <rramsd...@activedg.com>:
>>  
>>> I found an bug in spamassassin that can be reliably reproduced when
>>> using our local rules. What would be interesting is to track down
>>> where this bug is exactly.
>>>
>>> 1. The process runs @ 100% cpu and hangs there.  Has t o be kill -9 'ed
>>> 2. I see no errors in spamassassin -D
>>>
>>> For the time being I have removed our rules until this problem is
>>> resolved.
>>>
>>> My question is is what would be the best way to determine what bug I
>>> am hitting when the process simply hangs?
>>>     
>>
>> Add first halve of your rules, test
>> if it exposes the error, split in two halves and test each halve.
>> etc.
>>
>>   
> Yeah that is the fastest way. :) I used a little diff formula and
> found the issue. My I think this may not be the rule we were going for
> but ...
> body            __RCR_MEGADK                    /.*(M.*E.*G.*A.*D.*K).*/

That looks like a VERY good candidate!  It is always a bad idea to use
.* in a body rule.  Try limiting the match.

body  __RCR_MEGADK   /M.{0,100}E.{0,100}G.{0,100}A.{0,100}D.{0,100}K/

I also removed the unneeded parenthesis and the .* at the beginning and end.

-- 
Bowie

Reply via email to