Menu

#110 Verification suceeds for invalid "h=" values

v2.5.2
closed-fixed
5
2008-04-14
2008-04-11
M T
No

DKIM verification succeeds even if a message has no headers in the "h=" field or if the "From" header is not included in the "h=" list, both of which should be failures cases.

Sample message with empty "h=" attached. This succeeded when testing with latest version (2.5.2).

Discussion

  • M T

    M T - 2008-04-11

    Empty "h=" msg

     
  • Anonymous

    Anonymous - 2008-04-11
    • labels: --> Functionality
    • milestone: --> v2.5.2
    • assigned_to: nobody --> sm-msk
     
  • Anonymous

    Anonymous - 2008-04-11

    Logged In: YES
    user_id=1048957
    Originator: NO

    Try the attached patch, which will be included in 2.5.3.
    File Added: PATCH

     
  • Anonymous

    Anonymous - 2008-04-11

    Proposed patch #2

     
  • Anonymous

    Anonymous - 2008-04-11

    Logged In: YES
    user_id=1048957
    Originator: NO

    File Added: PATCH

     
  • Anonymous

    Anonymous - 2008-04-14
    • status: open --> closed-fixed
     
  • Anonymous

    Anonymous - 2008-04-14

    Logged In: YES
    user_id=1048957
    Originator: NO

    Patch included in v2.5.3, now released.

     

Log in to post a comment.