FUTATSUKI Yasuhito

Results 99 comments of FUTATSUKI Yasuhito

build-aux directory missing need files for compilation

> Was there any reason they are not in the 2.11 beta2 build? I guess it is simply because 2.11.0-Beta2 is not a release, thus its asset were not built...

OpenDKIM signs incoming email if it's from a domain it manages

Signing is enabled only for messages comes from safe origin. OpenDKIM milter uses `InternalHosts` dataset and `MTA` dataset, `{auth_type}` milter macro and POPAUTH(if enabled) to check it. So I don't...

Unexpected reply error

The message came from `libopendkim/dkim-keys.c` and caused by the DNS response for the query for 'default._domainkey.*******.com' TXT type. So if you can use dig or other DNS query tools and...

Unexpected reply error

I cannot reproduce the issue by just using CNAME for selector.domainkey.example.domain. e.g. ``` aliassample._domainkey.debug.gr.jp. 3600 IN CNAME default._domainkey.debug.gr.jp. default._domainkey.debug.gr.jp. 3600 IN TXT "v=DKIM1; k=rsa; " "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0qwM7Xk73VeWA8CxsK8xUHLc7hMJQl23tieAI/iuklzflvxxyNpXN/DlAvglGqahzW7ebYqW/zPhU33qyVGg8cYB8HAgQKditKAVEixwl7x5/7ieGRDmcczLtbyrP5dhpT6mLU6Y552fSKueeNqzPDn8leY2eXzlF6jqJ8F6+T8piSmv7MtamujT0IQlDoxF67BXuMkKYewFw" "0Fgk7eSu/5IQkINov2DRBE54CkkHR9ivLcsMlND+//emMsY+VGhyJCf4ceFZ65YIwSu6b8XTMtpIU14Cl1cskVfSaJ6IaqlCYuAfhCMwjHU3bL7Nbo47+td4MKnZRLFQjZpOq27wIDAQAB" ``` A sample...

dmarc_dns_get_record() calls res_ninit() without zeroing resp first

I could confirm that your patch fixes the crash when the milter was called on the end of the message every times on FreeBSD 14.1-RELEASE. Thank you. (On FreeBSD 14.0-RELEASE,...

Incorrect header parsing

I've tested `dmarcf_mail_parse()` and `dmarcf_mail_parse_multi()` by patching [opendmarc-parse-test-patch.txt](https://github.com/trusteddomainproject/OpenDMARC/files/14746576/opendmarc-parse-test-patch.txt) against opendmarc/parse.c, and compiled with ``` cc -DMAILPARSE_TEST -DMAILPARSE_MULTI_TEST -O0 -g -o mailparse_multi cc -DMAILPARSE_TEST -O0 -g -o mailparse parse.c` ``` then...

This is a null pointer dereference vulnerability occurring at line 1480 in the file /OpenDMARC/libopendmarc/opendmarc_policy.c

Although the library function itself is obviously broken in safety, its callers in OpenDMARC, https://github.com/trusteddomainproject/OpenDMARC/blob/master/opendmarc/opendmarc-check.c#L224 and https://github.com/trusteddomainproject/OpenDMARC/blob/master/opendmarc/opendmarc.c#L3289 always call the function with size_of_buf = 0. So OpenDMARC itself is not...

This is a null pointer dereference vulnerability occurring at line 1480 in the file /OpenDMARC/libopendmarc/opendmarc_policy.c

On the other hand, as a library function, opendmarc_policy_fetch_ruf() cannot owe that line_buf and size_of_buf have right values. If line_buf is not pointing right place to store some value, even...

This is a null pointer dereference vulnerability occurring at line 1480 in the file /OpenDMARC/libopendmarc/opendmarc_policy.c

Just wait a moment. Although it might not a vulnerability, I also think it is a bug which should be fixed (perhaps change '||' to '&&').

ARC-Authentication-Results, openarc not working correctly, RHEL7

> smtpd_milters = inet:localhost:8891, inet:127.0.0.1:8894, inet:127.0.0.1:8893 In the EOM(end of message) and EOH(end of header) milter protocol stage[1], postfix calls milters as the order described in smtpd_milters setting[2]. So the...