https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8300
--- Comment #4 from Kent Oyer <k...@mxguardian.net> ---
While it's true the message has no ARC signature, there is still a path to the
code.
This is because $pms->{arc_verifier} exists and $pms->{arc_verifier}->result is
"none".
Perhaps we should make this change as well:
--- lib/Mail/SpamAssassin/Plugin/DMARC.pm (revision 1922674)
+++ lib/Mail/SpamAssassin/Plugin/DMARC.pm (working copy)
@@ -328,7 +328,7 @@
}
my $dmarc_arc_verified = 0;
- if (($result->result ne 'pass') and (ref($pms->{arc_verifier}) and
($pms->{arc_verifier}->result))) {
+ if (($result->result ne 'pass') and (ref($pms->{arc_verifier}) and
($pms->{arc_verifier}->result =~ '^(?:pass|fail)$'))) {
undef $result;
$dmarc_arc_verified = 1;
# if DMARC fails retry by reading data from AAR headers
>From the docs, Mail::DKIM::ARC::Verifier->result() returns 'pass', 'fail',
'invalid' or 'none'
https://metacpan.org/pod/Mail::DKIM::ARC::Verifier#result()
--
You are receiving this mail because:
You are the assignee for the bug.
