[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#588859: marked as done (encode_rfc1522 fails to take into account parentheses)

Your message dated Fri, 06 Aug 2010 13:47:09 +0000
with message-id <E1OhNGP-0004of-6v@franck.debian.org>
and subject line Bug#588859: fixed in debbugs 2.4.2~exp1
has caused the Debian Bug report #588859,
regarding encode_rfc1522 fails to take into account parentheses
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org

588859: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=588859
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: debbugs
Severity: important

We had someone sending mail to debbugs.gnu.org who found his mails
were never appearing on the bug list (ie the maintainer address).
Examining the logs, the gnu.org mail server was rejecting the mails
resent from debbugs with "550 Invalid address in message header".

This appears to be due to a bug in the encode_rfc1522 function.
You can see examples of the input at:


and the output at:


Debbugs appears to be construcing bad From, Resent-From headers,
violating this section of RFC1522:

   section 5 (Use of encoded-words in message headers):

   (2) An encoded-word may appear within a comment delimited by "(" and
       ")", i.e., wherever a "ctext" is allowed.  More precisely, the
       RFC 822 ABNF definition for "comment" is amended as follows:

       comment = "(" *(ctext / quoted-pair / comment / encoded-word) ")"

       A "Q"-encoded encoded-word which appears in a comment MUST NOT
       contain the characters "(", ")" or " encoded-word that appears in
       a "comment" MUST be separated from any adjacent encoded-word or
       "ctext" by linear-white-space.

A minimal example that shows the problem is included below:


use strict;
use warnings;

use Debbugs::MIME qw(decode_rfc1522 encode_rfc1522);

my $str = 'none@example.com (J =?utf-8?Q?Bockg=C3=A5rd?=)';
my $dec = decode_rfc1522($str);
my $enc = encode_rfc1522($dec);

print $str, "\n";  # -> none@example.com (J =?utf-8?Q?Bockg=C3=A5rd?=)
print $dec, "\n";  # -> none@example.com (J Bockgård)
print $enc, "\n";  # -> none@example.com (J =?UTF-8?Q?Bockg=C3=A5rd)?=

(I don't want my email unobscured on the web, so the from address is
hopefully faked. I will read any responses via the web interface.)

--- End Message ---
--- Begin Message ---
Source: debbugs
Source-Version: 2.4.2~exp1

We believe that the bug you reported is fixed in the latest version of
debbugs, which is due to be installed in the Debian FTP archive:

  to main/d/debbugs/debbugs-local_2.4.2~exp1_all.deb
  to main/d/debbugs/debbugs-web_2.4.2~exp1_all.deb
  to main/d/debbugs/debbugs_2.4.2~exp1.dsc
  to main/d/debbugs/debbugs_2.4.2~exp1.tar.gz
  to main/d/debbugs/debbugs_2.4.2~exp1_all.deb
  to main/d/debbugs/libdebbugs-perl_2.4.2~exp1_all.deb

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 588859@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Don Armstrong <don@debian.org> (supplier of updated debbugs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

Hash: RIPEMD160

Format: 1.8
Date: Thu, 05 Aug 2010 21:54:12 -0700
Source: debbugs
Binary: debbugs libdebbugs-perl debbugs-web debbugs-local
Architecture: source all
Version: 2.4.2~exp1
Distribution: experimental
Urgency: low
Maintainer: Debbugs developers <debian-debbugs@lists.debian.org>
Changed-By: Don Armstrong <don@debian.org>
 debbugs    - The bug tracking system based on the active Debian BTS
 debbugs-local - run and maintains a local mirror of the Debian BTS
 debbugs-web - web scripts for the active Debian BTS
 libdebbugs-perl - modules used by the active Debian BTS
Closes: 497144 545895 556863 556863 563470 565981 566068 566089 567407 567439 568020 568464 578822 585796 588859
 debbugs (2.4.2~exp1) experimental; urgency=low
   * Allow (almost) exactly what RFC2822 allows in comments (closes:
   * Fix problem with non-existant /etc/debbugs/config
   * Ditch \r and \n in status fields (closes: #545895)
   * Properly handle source packages when searching by maintainer; use
     package_maintainer instead of the hashes (closes: #556863)
   * Handle \r properly in Debbugs::MIME for PGP signatures
     (closes: #565981). Thanks to Mike Hommey
   * Allow type to be text as well as text/(something not html)
     (closes: #566068). Thanks to Mike Hommey.
   * Fix links to PTS pages for src packages (closes: #566089). Thanks to
     Sandro Tosi.
   * Fix affects for source packages (closes: #563470). Thanks to Charles
   * Allow tag instead of tags; silently normalize it (closes: #567407).
     Thanks to Martin Krafft.
   * Properly handle Forwarded: at submit@ time (closes: #568020). Thanks
     to Martin Krafft.
   * Fix source package src: urls (closes: #567439). Thanks to Paul Wise.
   * Use package_maintainer to search for packages maintained by a
     maintainer (closes: #556863). Thanks to Yves-Alexis Perez.
   * Linkify CVE reports (closes: #568464). Thanks to Martin Zobel-Helas.
   * Fix noaffects option
   * Allow the default sendmail options to be specified in the config file;
     don't use -obq by default anymore.
   * Add urls to control@ mail footer (Closes: #578822). Thanks to Lars
   * Don't RFC1522 escape ", ( and ). (Closes: #588859). Thanks to Glenn
   * Various changes to make debbugs-local work better (Closes: #585796)
     - Add libnet-server-fork-perl to Depends for debbugs-local
     - Sanitize env in -T code
 fff2409cf2e57f0dedd9deba86c4f349e29c0cb5 1348 debbugs_2.4.2~exp1.dsc
 cbf7bdea6308f31b052c117e8c9724edbc2caccb 268291 debbugs_2.4.2~exp1.tar.gz
 ed9f88d67f22ad754022e23b4811d7f1571aa8dd 87852 debbugs_2.4.2~exp1_all.deb
 53c5c6c8fe18d3c272db0663931b6f8a191d1dc5 183510 libdebbugs-perl_2.4.2~exp1_all.deb
 13a1a7d702f16c702ad70dabf4826b9882c7dc4c 56222 debbugs-web_2.4.2~exp1_all.deb
 1e4b3fa4e238cc7bf246a97a90a277963745f60b 21822 debbugs-local_2.4.2~exp1_all.deb
 6088f0c589e73b945f8855dcbbee797c53966a32840d2e520c2f36b0122b0926 1348 debbugs_2.4.2~exp1.dsc
 705050f97cb8ac375a9b7094a0320c90be4f1cb66c82fb60c49e2225ed16b28a 268291 debbugs_2.4.2~exp1.tar.gz
 df866da82cebb925c27553fd69a3515405e02664e3612ac012d2fd72384f2fb0 87852 debbugs_2.4.2~exp1_all.deb
 f93309c61db5cad391a0b49d75574947fe70594b4e44520595e807a47486516f 183510 libdebbugs-perl_2.4.2~exp1_all.deb
 9cf4d4761f111a061dfd758d2454c5f88660ac51dd9a0a5b3dc62641e30dc9dd 56222 debbugs-web_2.4.2~exp1_all.deb
 625facd90c90ea9d80b8591f442f6b434c82caf6ae6ac19865aa4ac8bd4daf38 21822 debbugs-local_2.4.2~exp1_all.deb
 92bd6b0dfdc6aa922e6a9c5994447078 1348 misc extra debbugs_2.4.2~exp1.dsc
 edc6e8a5d8eece2bee294ed70e1bc055 268291 misc extra debbugs_2.4.2~exp1.tar.gz
 328ccda45a9d87129e48eedd85123b3f 87852 misc extra debbugs_2.4.2~exp1_all.deb
 96b225d85cb1384dce317b7012bc82e2 183510 perl extra libdebbugs-perl_2.4.2~exp1_all.deb
 52e8e00064cf36cf8b5e25ab25239d39 56222 misc extra debbugs-web_2.4.2~exp1_all.deb
 182964ca7e7e9aa38ecc9fa74585d038 21822 misc extra debbugs-local_2.4.2~exp1_all.deb

Version: GnuPG v1.4.10 (GNU/Linux)


--- End Message ---

Reply to: