<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>113128</bug_id>
          
          <creation_ts>2005-11-20 20:14 0000</creation_ts>
          <short_desc>mail-filter/libspf2 not 64 bit safe in spf_interpret.c</short_desc>
          <delta_ts>2006-09-27 04:56:22 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Linux</product>
          <component>Ebuilds</component>
          <version>unspecified</version>
          <rep_platform>AMD64</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://www.gossamer-threads.com/lists/exim/users/49225</bug_file_loc>
          
          
          <priority>P2</priority>
          <bug_severity>critical</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>olivier.hill@gmail.com</reporter>
          <assigned_to>amd64@gentoo.org</assigned_to>
          <cc>net-mail@gentoo.org</cc>
    
    <cc>pfeifer@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>olivier.hill@gmail.com</who>
            <bug_when>2005-11-20 20:14:14 0000</bug_when>
            <thetext>As reported by Carsten Koch-Mauthe, libspf2-1.2.5 is not 64 bit safe.

This can cause Exim to segfault if it was configured to use spf.

You can see the complete report at:
http://www.gossamer-threads.com/lists/spf/devel/24280?do=post_view_threaded

The solution is to simply declare the buflen variable as size_t instead of int.

I have created a patch and will try to attach it to the bug report.

Reproducible: Always
Steps to Reproduce:
emerge libspf
USE=&quot;spf&quot; emerge exim

Start Exim and wait for some emails to come by.
Actual Results:  
Look at dmesg, you should see the following:
exim[11307]: segfault at 0000000000616000 rip 00002aaaabe25a73 rsp
00007fffffbffea8 error 6</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>olivier.hill@gmail.com</who>
            <bug_when>2005-11-20 20:16:11 0000</bug_when>
            <thetext>Created an attachment (id=73276)
Patch for 64 bit safety
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>olivier.hill@gmail.com</who>
            <bug_when>2005-11-20 20:19:44 0000</bug_when>
            <thetext>Created an attachment (id=73277)
libspf2-1.2.5-r2.ebuild
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jakub@gentoo.org</who>
            <bug_when>2006-08-01 10:03:31 0000</bug_when>
            <thetext>Sending this amd64 way, been sitting here for ages and it concerns mainly them, after all.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>blubb@gentoo.org</who>
            <bug_when>2006-09-27 04:56:22 0000</bug_when>
            <thetext>thanks Olivier, patch is applied in -r2</thetext>
          </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>73276</attachid>
            <date>2005-11-20 20:16 0000</date>
            <desc>files/patch-libspf2-1.2.5-amd64</desc>
            <filename>patch-libspf2-1.2.5-amd64</filename>
            <type>text/plain</type>
            <data encoding="base64">LS0tIHNyYy9saWJzcGYyL3NwZl9pbnRlcnByZXQuYy5vcmlnCTIwMDUtMDItMjEgMjI6NDE6Mjcu
MDAwMDAwMDAwIC0wNTAwCisrKyBzcmMvbGlic3BmMi9zcGZfaW50ZXJwcmV0LmMJMjAwNS0xMS0y
MCAyMjo1NTowNC4wMDAwMDAwMDAgLTA1MDAKQEAgLTQ5LDcgKzQ5LDcgQEAKIAlTUEZfcmVjb3Jk
X3QJKnNwZl9yZWNvcmQ7CiAJU1BGX2VycmNvZGVfdAkgZXJyOwogCWNoYXIJCQkqYnVmOwotCWlu
dAkJCQkgYnVmbGVuOworCXNpemVfdAkJCQkgYnVmbGVuOwogCWludAkJCQkgbGVuOwogCiAJU1BG
X0FTU0VSVF9OT1ROVUxMKHNwZl9yZXNwb25zZSk7Cg==
</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>73277</attachid>
            <date>2005-11-20 20:19 0000</date>
            <desc>libspf2-1.2.5-r2.ebuild</desc>
            <filename>libspf2-1.2.5-r2.ebuild</filename>
            <type>text/plain</type>
            <data encoding="base64">IyBDb3B5cmlnaHQgMTk5OS0yMDA1IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k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=
</data>        

          </attachment>
    </bug>

</bugzilla>