header folding bug in lmtpd?

[Christian Stuellenberg]

Jason Alderfer sagte:
> I've discovered what appears to be a bug in the header folding code of
> lmtpd.  Cyrus-2.2.8 on Slackware Linux 9.1, 2.4 kernel.  It occurs only
> under the following specific conditions:
>
> 1. connections to lmtpd via TCP from a different server
> 2. remote server connects using TLS
> 3. remote server passes identity of authenticated sender (AUTH=foo)
>
> Under the above conditions, the message header added by lmtpd looks like
> this:
> Received: from tcell2.emu.edu (tcell2.emu.edu [10.3.200.80])
> (authenticated user=foo bits=0) by capybara.emu.edu (Cyrus v2.2.8) with
> LMTPSA (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256/256 verify=YES);
> Wed, 15 Sep 2004 12:48:15 +0000
> 	 (authenticated user=foo bits=0)
> 	 by capybara.emu.edu (Cyrus v2.2.8) with LMTPSA
>
> 	 Wed, 15 Sep 2004 12:48:15 +0000
>
>
> It should be (with no wrapping before 'verify=YES'):
> Received: from tcell2.emu.edu (tcell2.emu.edu [10.3.200.80])
> 	 (authenticated user=foo bits=0)
> 	 by capybara.emu.edu (Cyrus v2.2.8) with LMTPSA
> 	 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256/256 verify=YES);
> 	 Wed, 15 Sep 2004 21:02:59 +0000
>
>
> I made a slight modification to the code lmtpengine.c which fixed the
> problem for me, but I thought I'd ask if anyone else had noticed this
> behavior before I submitted a patch.

Have a look at
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&searchterm=lmtpengine&msg=31040

It appears to be a bug in 2.2.8 but is solved in CVS.

Regards,
Christian Stüllenberg

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html