https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6280

           Summary: BAD_ENC_HEADER mistakenly identifies spam due to
                    invalid pattern
           Product: Spamassassin
           Version: unspecified
          Platform: PC
        OS/Version: FreeBSD
            Status: NEW
          Severity: minor
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: e...@eaglehouse.org


The rule for BAD_ENC_HEADER is currently defined:

header BAD_ENC_HEADER        ALL =~ /=\?[^?\s]+\?[^?\s]\?\s*[^?]+\s(?!\?=)/

I suggest the correct pattern should be:

=\?[^?\s]+\?[^?\s]\?\s*.+?\?=

It fails on the following header because the pattern invalidly rejects RFC 2047
message header extensions, which doesn't mandate whitespace before the
terminating ?=. The rejected header was:

Subject: =?ISO-8859-1?Q?TeraStation Status Report:Infomation(Regular Report)?=

This subject line comes from a commercial program that I cannot fix. I know the
embedded spaces violate the RFC, but the SA pattern also wrongly requires a
whitespace character before the closing ?= delimiter.

I believe I have read the RFC correctly.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to