Bug 333629

Summary:	mail-filter/pypolicyd-spf-0.7.1 crashes with "IndexError: list index out of range"
Product:	Gentoo Linux	Reporter:	Kai Krakow <hurikhan77+bgo>
Component:	[OLD] Server	Assignee:	No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed>
Status:	RESOLVED TEST-REQUEST
Severity:	major
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugs.launchpad.net/pypolicyd-spf/+bug/621135
Whiteboard:
Package list:		Runtime testing required:	---

Description Kai Krakow 2010-08-20 14:20:58 UTC

When receiving and parsing a mail which has an unqualified envelope-from, pypolicyd-spf generates the following backtrace:

Aug 20 15:04:27 aaaaa policyd-spf[18616]: Permerror; identity=helo; client-ip=dd.ddd.dd.ddd; helo=aaaa.aa-aaa.aa; envelope-from=aaaaaa; receiver=aaaaaa.aaaaaaa@aaaaaaaa.aa
Aug 20 15:04:27 aaaaa policyd-spf[18616]: Traceback (most recent call last):
Aug 20 15:04:27 aaaaa policyd-spf[18616]: File "/usr/bin/policyd-spf", line 420, in <module>
Aug 20 15:04:27 aaaaa policyd-spf[18616]: instance_dict, configData)
Aug 20 15:04:27 aaaaa policyd-spf[18616]: File "/usr/bin/policyd-spf", line 343, in spfcheck
Aug 20 15:04:27 aaaaa policyd-spf[18616]: mfrom_resultpolicy, local = get_resultcodes(configData, 'mfrom')
Aug 20 15:04:27 aaaaa policyd-spf[18616]: File "/usr/bin/policyd-spf", line 122, in get_resultcodes
Aug 20 15:04:27 aaaaa policyd-spf[18616]: if spf.domainmatch(reject_domain_list, sender_domain[1]):
Aug 20 15:04:27 aaaaa policyd-spf[18616]: IndexError: list index out of range

Addresses and IPs have been obfuscated (a for chars, d for digits). Not sure if this problem can be used for DDOS attacks. Feel free to mark as security vulnerability.

Reproducible: Always

Comment 1 Pacho Ramos gentoo-dev

2012-02-09 12:27:54 UTC

Please re-test with 0.8.1