ID:               50977
 Updated by:       [email protected]
 Reported By:      lokitek at gmail dot com
-Status:           Open
+Status:           Feedback
 Bug Type:         Reproducible crash
 Operating System: CentOS 5.4
 PHP Version:      5.2.12
 New Comment:

Which imap version do you use?


Previous Comments:
------------------------------------------------------------------------

[2010-02-09 19:00:23] lokitek at gmail dot com

Description:
------------
While using the imap_headerinfo() function to obtain information about
emails that I check via IMAP, I noticed that PHP complained about
imap_headerinfo() Address buffer overflow.
A bit of investigation revealed that a spam message containing 500+ CC
email addresses caused this issue.

Reproduce code:
---------------
// Send an email with 500+ CCd users. then use imap_headerinfo() to //
obtain all header information.
// [from doc]
$mBox = imap_open("{host:143/imap/novalidate-cert}INBOX}", $username,
$password); // open as imap
$header = imap_header($mBox, 1); // get first mails header

// imap_headerinfo() will crash with the following error:
// PHP Fatal error:  imap_headerinfo(): Address buffer overflow



Expected result:
----------------
I expect to information about the given message number by reading its
headers and returned in an object format

Actual result:
--------------
PHP Fatal error:  imap_headerinfo(): Address buffer overflow


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=50977&edit=1

Reply via email to