|
 |
27f02a |
From fb97a1cddbda4019e327fa736972a1c7433fedaa Mon Sep 17 00:00:00 2001
|
|
|
27f02a |
From: Timo Sirainen <timo.sirainen@open-xchange.com>
|
|
|
27f02a |
Date: Fri, 11 Sep 2020 09:53:03 +0300
|
|
|
27f02a |
Subject: [PATCH] lib-mail: message-parser - Fix assert-crash when enforcing
|
|
|
27f02a |
MIME part limit
|
|
|
27f02a |
|
|
|
27f02a |
The limit could have been exceeded with message/rfc822 parts.
|
|
|
27f02a |
---
|
|
|
27f02a |
src/lib-mail/message-parser.c | 3 +-
|
|
|
27f02a |
src/lib-mail/test-message-parser.c | 82 ++++++++++++++++++++++++++++++
|
|
|
27f02a |
2 files changed, 84 insertions(+), 1 deletion(-)
|
|
|
27f02a |
|
|
|
27f02a |
diff --git a/src/lib-mail/message-parser.c b/src/lib-mail/message-parser.c
|
|
|
27f02a |
index 6ab4c3266f..40a504da0a 100644
|
|
|
27f02a |
--- a/src/lib-mail/message-parser.c
|
|
|
27f02a |
+++ b/src/lib-mail/message-parser.c
|
|
|
27f02a |
@@ -703,7 +703,8 @@ static int parse_next_header(struct message_parser_ctx *ctx,
|
|
|
27f02a |
ctx->multipart = FALSE;
|
|
|
27f02a |
ctx->parse_next_block = parse_next_body_to_boundary;
|
|
|
27f02a |
} else if ((part->flags & MESSAGE_PART_FLAG_MESSAGE_RFC822) != 0 &&
|
|
|
27f02a |
- !parse_too_many_nested_mime_parts(ctx)) {
|
|
|
27f02a |
+ !parse_too_many_nested_mime_parts(ctx) &&
|
|
|
27f02a |
+ ctx->total_parts_count < ctx->max_total_mime_parts) {
|
|
|
27f02a |
ctx->parse_next_block = parse_next_body_message_rfc822_init;
|
|
|
27f02a |
} else {
|
|
|
27f02a |
part->flags &= ~MESSAGE_PART_FLAG_MESSAGE_RFC822;
|
|
|
27f02a |
diff --git a/src/lib-mail/test-message-parser.c b/src/lib-mail/test-message-parser.c
|
|
|
27f02a |
index 8c5a3404f1..c4e117afc7 100644
|
|
|
27f02a |
--- a/src/lib-mail/test-message-parser.c
|
|
|
27f02a |
+++ b/src/lib-mail/test-message-parser.c
|
|
|
27f02a |
@@ -1127,6 +1127,87 @@ static const char input_msg[] =
|
|
|
27f02a |
test_end();
|
|
|
27f02a |
}
|
|
|
27f02a |
|
|
|
27f02a |
+static void test_message_parser_mime_part_limit_rfc822(void)
|
|
|
27f02a |
+{
|
|
|
27f02a |
+static const char input_msg[] =
|
|
|
27f02a |
+"Content-Type: multipart/mixed; boundary=\"1\"\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"--1\n"
|
|
|
27f02a |
+"Content-Type: multipart/mixed; boundary=\"2\"\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"--2\n"
|
|
|
27f02a |
+"Content-Type: message/rfc822\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"Content-Type: text/plain\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"1\n"
|
|
|
27f02a |
+"--2\n"
|
|
|
27f02a |
+"Content-Type: message/rfc822\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"Content-Type: text/plain\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"22\n"
|
|
|
27f02a |
+"--1\n"
|
|
|
27f02a |
+"Content-Type: message/rfc822\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"Content-Type: text/plain\n"
|
|
|
27f02a |
+"\n"
|
|
|
27f02a |
+"333\n";
|
|
|
27f02a |
+ const struct message_parser_settings parser_set = {
|
|
|
27f02a |
+ .max_total_mime_parts = 3,
|
|
|
27f02a |
+ };
|
|
|
27f02a |
+ struct message_parser_ctx *parser;
|
|
|
27f02a |
+ struct istream *input;
|
|
|
27f02a |
+ struct message_part *parts, *part;
|
|
|
27f02a |
+ struct message_block block;
|
|
|
27f02a |
+ pool_t pool;
|
|
|
27f02a |
+ int ret;
|
|
|
27f02a |
+
|
|
|
27f02a |
+ test_begin("message parser mime part limit rfc822");
|
|
|
27f02a |
+ pool = pool_alloconly_create("message parser", 10240);
|
|
|
27f02a |
+ input = test_istream_create(input_msg);
|
|
|
27f02a |
+
|
|
|
27f02a |
+ parser = message_parser_init(pool, input, &parser_set);
|
|
|
27f02a |
+ while ((ret = message_parser_parse_next_block(parser, &block)) > 0) ;
|
|
|
27f02a |
+ test_assert(ret < 0);
|
|
|
27f02a |
+ message_parser_deinit(&parser, &parts;;
|
|
|
27f02a |
+
|
|
|
27f02a |
+ part = parts;
|
|
|
27f02a |
+ test_assert(part->children_count == 2);
|
|
|
27f02a |
+ test_assert(part->flags == (MESSAGE_PART_FLAG_MULTIPART | MESSAGE_PART_FLAG_IS_MIME));
|
|
|
27f02a |
+ test_assert(part->header_size.lines == 2);
|
|
|
27f02a |
+ test_assert(part->header_size.physical_size == 45);
|
|
|
27f02a |
+ test_assert(part->header_size.virtual_size == 45+2);
|
|
|
27f02a |
+ test_assert(part->body_size.lines == 21);
|
|
|
27f02a |
+ test_assert(part->body_size.physical_size == 238);
|
|
|
27f02a |
+ test_assert(part->body_size.virtual_size == 238+21);
|
|
|
27f02a |
+
|
|
|
27f02a |
+ part = parts->children;
|
|
|
27f02a |
+ test_assert(part->children_count == 1);
|
|
|
27f02a |
+ test_assert(part->flags == (MESSAGE_PART_FLAG_MULTIPART | MESSAGE_PART_FLAG_IS_MIME));
|
|
|
27f02a |
+ test_assert(part->header_size.lines == 2);
|
|
|
27f02a |
+ test_assert(part->header_size.physical_size == 45);
|
|
|
27f02a |
+ test_assert(part->header_size.virtual_size == 45+2);
|
|
|
27f02a |
+ test_assert(part->body_size.lines == 18);
|
|
|
27f02a |
+ test_assert(part->body_size.physical_size == 189);
|
|
|
27f02a |
+ test_assert(part->body_size.virtual_size == 189+18);
|
|
|
27f02a |
+
|
|
|
27f02a |
+ part = parts->children->children;
|
|
|
27f02a |
+ test_assert(part->children_count == 0);
|
|
|
27f02a |
+ test_assert(part->flags == MESSAGE_PART_FLAG_IS_MIME);
|
|
|
27f02a |
+ test_assert(part->header_size.lines == 2);
|
|
|
27f02a |
+ test_assert(part->header_size.physical_size == 30);
|
|
|
27f02a |
+ test_assert(part->header_size.virtual_size == 30+2);
|
|
|
27f02a |
+ test_assert(part->body_size.lines == 15);
|
|
|
27f02a |
+ test_assert(part->body_size.physical_size == 155);
|
|
|
27f02a |
+ test_assert(part->body_size.virtual_size == 155+15);
|
|
|
27f02a |
+
|
|
|
27f02a |
+ test_parsed_parts(input, parts);
|
|
|
27f02a |
+ i_stream_unref(&input);
|
|
|
27f02a |
+ pool_unref(&pool);
|
|
|
27f02a |
+ test_end();
|
|
|
27f02a |
+}
|
|
|
27f02a |
+
|
|
|
27f02a |
int main(void)
|
|
|
27f02a |
{
|
|
|
27f02a |
static void (*const test_functions[])(void) = {
|
|
|
27f02a |
@@ -1301,6 +1382,7 @@ int main(void)
|
|
|
27f02a |
test_message_parser_mime_part_nested_limit,
|
|
|
27f02a |
test_message_parser_mime_part_nested_limit_rfc822,
|
|
|
27f02a |
test_message_parser_mime_part_limit,
|
|
|
27f02a |
+ test_message_parser_mime_part_limit_rfc822,
|
|
|
27f02a |
NULL
|
|
|
27f02a |
};
|
|
|
27f02a |
return test_run(test_functions);
|