Alberto Bertogli 61792e3bb4 Reject invalid characters in domains ...

Domains in addresses had very lax validation, which allowed them to
include characters like "/".

That could be exploited to trigger a daemon panic: a MAIL FROM
"x@evil/foo" could be accepted and, on failed delivery, a DSN queued.
Attempting to deliver the DSN would cause an MTA-STS cache lookup, which
would panic because the domain includes a "/" and crash the server.
Because the DSN would be queued, the server would crash again on
restarts, and only self-recover after give_up_send_after (20h by
default).

To fix this, we now explicitly validate the domain when normalizing it,
make MTA-STS cache not panic on invalid domains, and also make the SMTP
courier fail permanently on invalid domains.

Thanks to John JEAN <john@wargan.com> for finding and reporting this
problem. The detailed report can be found in
https://johnjean.io/advisories/chasquid-unauthenticated-remote-dos/.

2026-10-09 00:00:12 +01:00

..

testdata/fuzz/FuzzConnection

test: Update fuzz tests to use the built-in infrastructure

2023-02-05 12:30:25 +00:00

conn_test.go

test: Use modern testing features instead of custom helpers

2026-10-03 10:34:35 +01:00

conn.go

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

dotreader_test.go

smtpsrv: Strict CRLF enforcement in DATA contents

2023-12-24 10:43:27 +00:00

dotreader.go

Apply more mechanical simplifications using recent Go features

2026-10-03 09:31:15 +01:00

fuzz_test.go

Fix non-constant format string in calls to Printf-like functions

2025-10-24 12:34:58 +01:00

server_test.go

Reject invalid characters in domains

2026-10-09 00:00:12 +01:00

server.go

monitoring: Use method-based routing and CSRF for http requests

2026-10-04 19:02:05 +01:00