Alberto Bertogli 2612c8bfa1 dkim: Fail verification if l= is too large ...

Currently, if the value of the l= tag is larger than the body, that
causes an out-of-bound access and the server crashes.

The RFC is clear that the value should be <= the size of the
canonicalized body.

This patch fixes the problem by validating the length appropriately, and
returning a permanent failure if it's invalid.

Thanks to John JEAN <john@wargan.com> who reported a similar issue
(fixed in a previous patch), which led to finding this bug.

2026-10-09 21:32:22 +01:00

..

testdata

dkim: Update .gitignore pattern for private test cases

2024-04-21 11:08:08 +01:00

canonicalize_test.go

dkim: Implement internal dkim signing and verification

2024-03-12 20:43:21 +00:00

canonicalize.go

cleanup: Remove unused/unnecessary code

2024-12-01 22:03:47 +00:00

context_test.go

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

context.go

Apply go fix to simplify using modern features

2026-10-02 18:34:25 +01:00

dns_test.go

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

dns.go

Apply go fix to simplify using modern features

2026-10-02 18:34:25 +01:00

file_test.go

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

header_test.go

dkim: Make timestamp parsing more robust against overflow

2024-05-10 16:47:22 +01:00

header.go

Apply go fix to simplify using modern features

2026-10-02 18:34:25 +01:00

message_test.go

dkim: Implement internal dkim signing and verification

2024-03-12 20:43:21 +00:00

message.go

dkim: Implement internal dkim signing and verification

2024-03-12 20:43:21 +00:00

sign_test.go

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

sign.go

dkim: Implement internal dkim signing and verification

2024-03-12 20:43:21 +00:00

verify_test.go

dkim: Fail verification if l= is too large

2026-10-09 21:32:22 +01:00

verify.go

dkim: Fail verification if l= is too large

2026-10-09 21:32:22 +01:00