sync/ports
1
0
Fork 0
mirror of https://git.freebsd.org/ports.git synced 2025-06-03 11:56:28 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

mail/opendmarc: fix multiple addresses in From vulnerability

Browse source 
- please note that it might only be a partial fix, see
  https://github.com/trusteddomainproject/OpenDMARC/pull/48#issuecomment-530375590

PR:		240505
Reported by:	protonmail
Approved by:	ports-secteam (delphij)
Obtained from:	https://github.com/trusteddomainproject/OpenDMARC/pull/48
MFH:		2019Q3
Security:	https://protonmail.com/blog/bellingcat-cyberattack-phishing/
This commit is contained in:
Kurt Jaeger 2019-09-15 09:51:20 +00:00
parent 94a2d943fa
commit ef4083f0d0
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=512093
3 changed files with 22 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
mail/opendmarc/Makefile
View file

@ -3,7 +3,7 @@
PORTNAME= opendmarc
PORTVERSION= 1.3.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= mail security
MASTER_SITES= SF/${PORTNAME} \
SF/${PORTNAME}/Previous%20Releases

10
mail/opendmarc/files/patch-libopendmarc_tests_test__finddomain.c Normal file
View file

@ -0,0 +1,10 @@
--- libopendmarc/tests/test_finddomain.c.orig 2012-10-25 15:38:55 UTC
+++ libopendmarc/tests/test_finddomain.c
@@ -23,6 +23,7 @@ main(int argc, char **argv)
/* 11 */ {"(,) joe@joe.com", "joe.com"},
/* 12 */ {"\"( bob@bob.com)\" joe@joe.com", "joe.com"},
/* 12 */ {"From: Davide D'Marco <user@blah.com>", "blah.com"},
+ /* 13 */ {"blah.com>", "blah.com"},
{NULL, NULL},
};
u_char dbuf[256];

11
mail/opendmarc/files/patch-opendmarc_opendmarc.c Normal file
View file

@ -0,0 +1,11 @@
--- opendmarc/opendmarc.c.orig 2017-03-04 13:28:39 UTC
+++ opendmarc/opendmarc.c
@@ -2193,7 +2193,7 @@ mlfi_eom(SMFICTX *ctx)
strncpy(dfc->mctx_fromdomain, domain, sizeof dfc->mctx_fromdomain - 1);
ostatus = opendmarc_policy_store_from_domain(cc->cctx_dmarc,
- from->hdr_value);
+ dfc->mctx_fromdomain);
if (ostatus != DMARC_PARSE_OKAY)
{
if (conf->conf_dolog)