Alberto Bertogli 2612c8bfa1 dkim: Fail verification if l= is too large ...

Currently, if the value of the l= tag is larger than the body, that
causes an out-of-bound access and the server crashes.

The RFC is clear that the value should be <= the size of the
canonicalized body.

This patch fixes the problem by validating the length appropriately, and
returning a permanent failure if it's invalid.

Thanks to John JEAN <john@wargan.com> who reported a similar issue
(fixed in a previous patch), which led to finding this bug.

2026-10-09 21:32:22 +01:00

..

aliases

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

auth

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

config

Wrap errors with %w when returning them

2026-10-03 11:03:49 +01:00

courier

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

dkim

dkim: Fail verification if l= is too large

2026-10-09 21:32:22 +01:00

domaininfo

Wrap errors with %w when returning them

2026-10-03 11:03:49 +01:00

dovecot

Wrap errors with %w when returning them

2026-10-03 11:03:49 +01:00

envelope

Apply more mechanical simplifications using recent Go features

2026-10-03 09:31:15 +01:00

expvarom

Apply more mechanical simplifications using recent Go features

2026-10-03 09:31:15 +01:00

haproxy

Implement HAProxy protocol support

2020-11-13 20:49:42 +00:00

localrpc

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

maillog

Apply go fix to simplify using modern features

2026-10-02 18:34:25 +01:00

nettrace

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

normalize

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

protoio

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

queue

queue: Fix inverted logic in mustIDNAToASCII

2026-10-09 00:02:13 +01:00

safeio

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

set

Fix minor typos found by codespell

2025-04-06 14:02:56 +01:00

smtp

Apply go fix to simplify using modern features

2026-10-02 18:34:25 +01:00

smtpsrv

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

sts

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

testlib

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

trace

Apply go fix to simplify using modern features

2026-10-02 18:34:25 +01:00

userdb

Wrap errors with %w when returning them

2026-10-03 11:03:49 +01:00