sendmail: fix for long headers (by Vladimir)
authorVladimir Dronnikov <dronnikov@gmail.com>
Sat, 17 Oct 2009 01:35:10 +0000 (03:35 +0200)
committerDenys Vlasenko <vda.linux@googlemail.com>
Sat, 17 Oct 2009 01:35:10 +0000 (03:35 +0200)
Signed-off-by: Vladimir Dronnikov <dronnikov@gmail.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
mailutils/sendmail.c

index a216d66c1aabff1a68fd2dfcbc6581ceb143ed87..2f99df6c06fb04ee95c695d11fe85fa64bbe6c54 100644 (file)
@@ -229,10 +229,15 @@ int sendmail_main(int argc UNUSED_PARAM, char **argv)
                        rcptto(sane_address(s+5));
                        free(s);
                        // N.B. Bcc: vanishes from headers!
+
                // other headers go verbatim
-               // N.B. we allow MAX_HEADERS generic headers at most to prevent attacks
-               } else if (strchr(s, ':')) {
+
+               // N.B. RFC2822 2.2.3 "Long Header Fields" allows for headers to occupy several lines.
+               // Continuation is denoted by prefixing additional lines with whitespace(s).
+               // Thanks (stefan.seyfried at googlemail.com) for pointing this out.
+               } else if (strchr(s, ':') || (list && skip_whitespace(s) != s)) {
  addheader:
+                       // N.B. we allow MAX_HEADERS generic headers at most to prevent attacks
                        if (MAX_HEADERS && ++nheaders >= MAX_HEADERS)
                                goto bail;
                        llist_add_to_end(&list, s);