ports/mail/opensmtpd-devel/files/patch-smtpd-smtp_session.c at 1f5f94e8fa4ab2063e23f93aaf190c2b25e81cbc - sync/ports - Archuserorg Forgejo: Archuser.org's Forgejo Server

sync/ports

mirror of https://git.freebsd.org/ports.git synced 2025-05-29 09:26:27 -04:00

Dima Panov 4e17d75935 - Prevent OpenSMTPD session hangs and retain a descriptor forever on empty body

(i.e. when the dot appears on the line directly after the headers).
    This could be used by an attacker to exhaust resources.

PR:		227899
Submitted by:	grembo
Obtained from:	OpenSMTPD git repo (backported)
MFH:		2018Q2

2018-05-03 23:17:24 +00:00

11 lines

286 B

C

Raw Blame History

 --- smtpd/smtp_session.c.orig	2018-05-01 13:35:00.375262000 +0000
 +++ smtpd/smtp_session.c	2018-05-01 13:37:22.637096000 +0000
@@ -1345,6 +1345,8 @@
  			s->dataeom = 1;
  			if (iobuf_queued(&s->obuf) == 0)
  				smtp_data_io_done(s);
 +			else
 +				io_reload(&s->oev);
  			return;
  		}