[Bug 676086] New: perl crash - causes spamassassin crash etc. - openSUSE Bugs

newer
[Bug 678877] New: Package Perl:...

[Bug 676086] New: perl crash - causes spamassassin crash etc.

older
[Bug 657625] New: bad CC address...

bugzilla_noreply＠novell.com

1 Mar 2011 1 Mar '11

22:20

https://bugzilla.novell.com/show_bug.cgi?id=676086 https://bugzilla.novell.com/show_bug.cgi?id=676086#c0 Summary: perl crash - causes spamassassin crash etc. Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: Other OS/Version: openSUSE 11.3 Status: NEW Severity: Critical Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: suse-beta@cboltz.de QAContact: qa@suse.de Found By: Beta-Customer Blocker: --- There's a perl bug that leads to crashes in some cases - see http://rt.perl.org/rt3/Public/Bug/Display.html?id=76538 One of the symptoms is that spamassassin crashes in some cases: mx:/var/spool/amavis/tmp/amavis-20110222T011015-07788 # spamassassin < email.txt perl: regcomp.c:5199: Perl_reg_numbered_buff_fetch: Assertion `rx->sublen >= (s - rx->subbeg) + i' failed. Aborted (This error message is copied from a mail on the postfixbuch-users mailinglist https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.h... but I have a similar mail from a web.de user that crashes spamassassin on my server.) https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055921.h... contains some details about what triggers the problem (HTML-only mails from freemailers like web.de) and a workaround for spamassassin until this bug is fixed. This bug was seen on openSUSE 11.3, but might affect other releases also. Unfortunately the mail that crashes spamassassin contains private data, therefore it's quite difficult to provide it as test case. I'm trying to edit out as much as possible, but I can't promise anything regarding that. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

1 Mar 1 Mar

23:02

New subject: [Bug 676086] perl crash - causes spamassassin crash etc.

https://bugzilla.novell.com/show_bug.cgi?id=676086 https://bugzilla.novell.com/show_bug.cgi?id=676086#c1 --- Comment #1 from Christian Boltz 2011-03-02 00:02:08 CET --- Created an attachment (id=416936) --> (http://bugzilla.novell.com/attachment.cgi?id=416936) testcase - run "spamassassin < email-crashes-sa.txt" This is an anonymized and shortened email that crashes spamassassin reproducable on openSUSE 11.3 and 11.4 (latest "RC 2.1" from mirror.zq1.de). I have no 11.2 available for testing - please test yourself. Spamassasin does NOT crash on openSUSE 11.1. To reproduce, run spamassassin < email-crashes-sa.txt Some more details: The only really required headers to reproduce the crash are From (@web.de) and Content-Type. The other headers can be deleted. The body is as short as possible. The crash is caused by the combination of various lines. I can no longer reproduce the crash if I - remove one of the lines - change one of the two mail addresses to .xx instead of .de - remove the ********** - remove the <pre> tag - remove the HTML entities (– < >) Just to make sure bugzilla gives you what I upload: # md5sum email-crashes-sa.txt e27f185123e23781aa4265dd5304dc85 email-crashes-sa.txt -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

23:05

New subject: [Bug 676086] perl crash - causes spamassassin crash etc.

https://bugzilla.novell.com/show_bug.cgi?id=676086 https://bugzilla.novell.com/show_bug.cgi?id=676086#c Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Security |Security Version|Final |RC 2 Product|openSUSE 11.3 |openSUSE 11.4 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.