bugzilla-daemon at bugzilla
Aug 12, 2012, 8:40 AM
Post #3 of 5
(166 views)
Permalink
|
|
[Bug 6823] [review] Malformed messages allow evasion of URIBL checks / Last body line skipped if multipart end boundary missing
[In reply to]
|
|
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6823
Kevin A. McGrail <kmcgrail [at] pccc> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |kmcgrail [at] pccc
--- Comment #6 from Kevin A. McGrail <kmcgrail [at] pccc> ---
+1 from me. I would say this is urgent and needs testing but from your code,
you are just pushing the last part of the message into the buffer and I can't
predict many issues.
Great catch.
And definitely open another ticket for the idea " Could "missing end boundary"
be a useful rule?"
I don't think the concern that the message was modified/corrupted along the way
should be consider valid. It will fail many other checks such as DKIM as well.
regards,
KAM
--
You are receiving this mail because:
You are the assignee for the bug.
|
