Bug #50977 [Com]: imap_headerinfo Address buffer overflow
Edit report at https://bugs.php.net/bug.php?id=50977&edit=1 ID: 50977 Comment by: rakesh at vivaconnect dot co Reported by:lokitek at gmail dot com Summary:imap_headerinfo Address buffer overflow Status: No Feedback Type: Bug Package:IMAP related Operating System: CentOS 5.4 PHP Version:5.2.12 Block user comment: N Private report: N New Comment: I experienced this bug today with php-imap 5.4.13-1.el5 on Centos 5. The package was installed via Remi repository. Previous Comments: [2013-02-18 00:34:06] php-bugs at lists dot php dot net No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Open". Thank you. [2011-09-12 15:56:27] jeremy at thomersonfamily dot com Although the OP never responded with a backtrace, it seems fairly easy to reproduce. I'm seeing it when I receive a message that has around 560 recipients in the "TO" field. If you are not able to easily reproduce it with that info, please reply to this thread and I'll provide additional debugging information. [2010-11-07 21:25:44] fel...@php.net Thank you for this bug report. To properly diagnose the problem, we need a backtrace to see what is happening behind the scenes. To find out how to generate a backtrace, please read http://bugs.php.net/bugs-generating-backtrace.php for *NIX and http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32 Once you have generated a backtrace, please submit it to this bug report and change the status back to "Open". Thank you for helping us make PHP better. [2010-11-01 11:54:45] paul at fubra dot com I'm also experiencing this error with CentOS release 5.3 (Final). yum list libc-client libc-client.i386 2004g-2.2.1 [2010-04-25 20:06:28] fel...@php.net Any news? The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=50977 -- Edit this bug report at https://bugs.php.net/bug.php?id=50977&edit=1
Bug #50977 [Com]: imap_headerinfo Address buffer overflow
Edit report at https://bugs.php.net/bug.php?id=50977&edit=1 ID: 50977 Comment by: jeremy at thomersonfamily dot com Reported by:lokitek at gmail dot com Summary:imap_headerinfo Address buffer overflow Status: Feedback Type: Bug Package:IMAP related Operating System: CentOS 5.4 PHP Version:5.2.12 Block user comment: N Private report: N New Comment: Although the OP never responded with a backtrace, it seems fairly easy to reproduce. I'm seeing it when I receive a message that has around 560 recipients in the "TO" field. If you are not able to easily reproduce it with that info, please reply to this thread and I'll provide additional debugging information. Previous Comments: [2010-11-07 21:25:44] fel...@php.net Thank you for this bug report. To properly diagnose the problem, we need a backtrace to see what is happening behind the scenes. To find out how to generate a backtrace, please read http://bugs.php.net/bugs-generating-backtrace.php for *NIX and http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32 Once you have generated a backtrace, please submit it to this bug report and change the status back to "Open". Thank you for helping us make PHP better. [2010-11-01 11:54:45] paul at fubra dot com I'm also experiencing this error with CentOS release 5.3 (Final). yum list libc-client libc-client.i386 2004g-2.2.1 [2010-04-25 20:06:28] fel...@php.net Any news? [2010-02-20 01:00:00] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". [2010-02-10 20:26:50] lokitek at gmail dot com drop centOS isn't all that easy - What would you recommend instead? ;) I'll update c-client and will let you know. Thanks! The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=50977 -- Edit this bug report at https://bugs.php.net/bug.php?id=50977&edit=1
Bug #50977 [Com]: imap_headerinfo Address buffer overflow
Edit report at http://bugs.php.net/bug.php?id=50977&edit=1 ID: 50977 Comment by: paul at fubra dot com Reported by:lokitek at gmail dot com Summary:imap_headerinfo Address buffer overflow Status: Feedback Type: Bug Package:IMAP related Operating System: CentOS 5.4 PHP Version:5.2.12 Block user comment: N New Comment: I'm also experiencing this error with CentOS release 5.3 (Final). yum list libc-client libc-client.i386 2004g-2.2.1 Previous Comments: [2010-04-25 20:06:28] fel...@php.net Any news? [2010-02-20 01:00:00] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". [2010-02-10 20:26:50] lokitek at gmail dot com drop centOS isn't all that easy - What would you recommend instead? ;) I'll update c-client and will let you know. Thanks! [2010-02-10 16:24:41] paj...@php.net Yes, or you may drop centos as well, known to have outdated versions of everything. Please let us know if it still happens once you have a decent version if c-client. [2010-02-10 16:06:17] lokitek at gmail dot com The c-client library is: libc-client 2004g-2.2.1 2004 sounds somewhat old, should I try to find an upgrade for it? The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/bug.php?id=50977 -- Edit this bug report at http://bugs.php.net/bug.php?id=50977&edit=1
#50977 [Com]: imap_headerinfo Address buffer overflow
ID: 50977
Comment by: lokitek at gmail dot com
Reported By: lokitek at gmail dot com
Status: Feedback
Bug Type: Reproducible crash
Operating System: CentOS 5.4
PHP Version: 5.2.12
New Comment:
I don't think that it makes a huge difference, but I just realized that
I'm on php-5.2.11 and using php-imap-5.2.11
If this isn't what you're after, just let me know and I can do a bit of
debugging all around.
Thanks!
Previous Comments:
[2010-02-09 19:06:57] paj...@php.net
Which imap version do you use?
[2010-02-09 19:00:23] lokitek at gmail dot com
Description:
While using the imap_headerinfo() function to obtain information about
emails that I check via IMAP, I noticed that PHP complained about
imap_headerinfo() Address buffer overflow.
A bit of investigation revealed that a spam message containing 500+ CC
email addresses caused this issue.
Reproduce code:
---
// Send an email with 500+ CCd users. then use imap_headerinfo() to //
obtain all header information.
// [from doc]
$mBox = imap_open("{host:143/imap/novalidate-cert}INBOX}", $username,
$password); // open as imap
$header = imap_header($mBox, 1); // get first mails header
// imap_headerinfo() will crash with the following error:
// PHP Fatal error: imap_headerinfo(): Address buffer overflow
Expected result:
I expect to information about the given message number by reading its
headers and returned in an object format
Actual result:
--
PHP Fatal error: imap_headerinfo(): Address buffer overflow
--
Edit this bug report at http://bugs.php.net/?id=50977&edit=1
