Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Oct 2001 09:21:24 -0700 (PDT)
From:      John Merryweather Cooper <john_m_cooper@yahoo.com>
To:        FreeBSD-gnats-submit@freebsd.org
Cc:        tobez@freebsd.org
Subject:   ports/31376: [MAINTAINER-UPDATE] Fix Null-Pointer Dereference causing SEGV in libesmtp-0.8.6
Message-ID:  <20011019162124.1A21615504@johncoop.MSHOME>

next in thread | raw e-mail | index | archive | help

>Number:         31376
>Category:       ports
>Synopsis:       [MAINTAINER-UPDATE] Fix Null-Pointer Dereference causing SEGV in libesmtp-0.8.6
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Oct 19 09:30:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     John Merryweather Cooper
>Release:        FreeBSD 4.4-STABLE i386
>Organization:
>Environment:
System: FreeBSD johncoop.MSHOME 4.4-STABLE FreeBSD 4.4-STABLE #31: Wed Oct 17 23:58:03 PDT 2001 jmcoopr@johncoop.MSHOME:/usr/obj/usr/src/sys/JOHNCOOP i386


	
>Description:
	The author announced on his developers mailing list that there is
	a Null-Pointer dereference in headers.c which results in a SEGV if
	the Subject: line of an outgoing message meets certain requirements.

	This patch fixes things while 0.8.7 is in the wings.

>How-To-Repeat:
	Run the example/test program with the -s option.  For example:

$ ./mail-file-a -s Test -n success -n failure -n delay -d -m test-mail wakked1@yahoo.com
S: 220 localhost.localdomain ESMTP Sendmail 8.11.2/8.11.2; Thu, 18 Oct 2001
21:20:44 GMT
C: EHLO mwwdev1
S: 250-localhost.localdomain Hello mwwdev1 [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-SIZE
250-DSN
250-ONEX
250-ETRN
250-XUSR
250 HELP
C: XUSR
S: 250 2.0.0 Initial submission
C: MAIL FROM:<>
S: 250 2.1.0 <>... Sender ok
C: RCPT TO:<wakked1@yahoo.com> NOTIFY=SUCCESS,FAILURE,DELAY
S: 250 2.1.5 <wakked1@yahoo.com>... Recipient ok
C: DATA
S: 354 Enter mail, end with "." on a line by itself
Segmentation fault (core dumped)

Note that balsa-1.2.0 does NOT trigger this behavior, but I'd rather be safe
than sorry.  :)

>Fix:

The diff -ruN below adds a patch-headers.c with the fix and bumps PORTREVISION.

diff -ruN libesmtp/Makefile libesmtp.new/Makefile
--- libesmtp/Makefile	Thu Oct 18 05:49:57 2001
+++ libesmtp.new/Makefile	Fri Oct 19 08:55:54 2001
@@ -2,10 +2,11 @@
 # Date created:         Sun Feb 21 2001
 # Whom:                 tobez@tobez.org
 #
-# $FreeBSD: ports/mail/libesmtp/Makefile,v 1.9 2001/10/18 11:33:51 tobez Exp $
+# $FreeBSD$
 
 PORTNAME=	libesmtp
 PORTVERSION=	0.8.6
+PORTREVISION=	1
 CATEGORIES=	mail
 MASTER_SITES=	http://www.stafford.uklinux.net/libesmtp/ \
 		http://www.theochem.kth.se/~pawsa/balsa/ \
diff -ruN libesmtp/files/patch-headers.c libesmtp.new/files/patch-headers.c
--- libesmtp/files/patch-headers.c	Wed Dec 31 16:00:00 1969
+++ libesmtp.new/files/patch-headers.c	Fri Oct 19 09:00:03 2001
@@ -0,0 +1,11 @@
+--- headers.c	Wed Oct 17 00:16:54 2001
++++ headers.c.new	Fri Oct 19 08:58:56 2001
+@@ -688,7 +688,7 @@
+ 	      if ((print = action->print) == NULL)
+ 		print = print_string;
+ 	      cat_reset (&message->hdr_buffer, 0);
+-	      (*print) (message, message->current_header);
++	      (*print) (message, info->hdr);
+ 	      header = cat_buffer (&message->hdr_buffer, len);
+             }
+         }
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011019162124.1A21615504>