OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
trivial-rewrite segfault, postfix-2.1-RC1-20040331

From: adi (adiimt.co.id)
Date: Wed Apr 07 2004 - 14:51:06 CDT

Now, my cronjobs beat postfix :-) (j/k)

One of our machine using qmail which doesn't sanitize
address:

% /var/qmail/bin/sendmail -f adiimt.co.id,adiimt.co.id adiimt.co.id

The trivial-rewrite would end up with segfault.

I think, this code is the cause:

resolve.c:

    /*
     * XXX Short-cut invalid address forms.
     */
    if (*flags & RESOLVE_FLAG_ERROR) {
        *flags |= RESOLVE_CLASS_DEFAULT;
        FREE_MEMORY_AND_RETURN;
    }

with such invalid address, vstring_free() freeing nothing.

Regards,

P.Y. Adi Prasaja