When qmail-inject sees a header line that does not look like a header line
at all (e.g. a continuation line without proper indenting), it makes a
conclusion the header ends here and processes the line as if it was a part
of a message body.

I am sure there is some reason why it behaves this way but I am afraid it
is a really bad idea to accept header malformations silently when
qmail-inject is supposed to get the list of recipients out of message
headers.

(In fact, this is all headerbody()'s fault because qmail-inject itself
would fail if headerbody() did not mask the problem.)

BTW: hfield_valid() should probably refuse any line whose "field
name" (sans trailing spaces before a colon) contains a space.

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."

Reply via email to