Message-ID: <email address hidden>
Date: Sun, 14 Aug 2005 10:39:04 +0200
From: Arnaud Giersch <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: fetchmail: lost patch: APOP and default fetchsizelimit
Package: fetchmail
Version: 6.2.5-12sarge1
Severity: normal
Hello,
I use APOP authentication to retrieve my mails with fetchmail. Since
last security update, it doesn't work any more when there are several
mails to fetch:
fetchmail: 4 messages for XXX at XXX (3180 octets).
fetchmail: cannot get a range of message sizes (1-4).
fetchmail: client/server protocol error while fetching from XXX
fetchmail: Query status=4 (PROTOCOL)
A workaround is to add "fetchsizelimit 1" in the procmailrc
configuration file.
A quick diff between fetchmail-6.2.5-12 and fetchmail-6.2.5-12sarge1
shows that the following patch was lost between the two releases:
diff -Naur fetchmail-6.2.5-12/driver.c fetchmail-6.2.5-12sarge1/driver.c
--- fetchmail-6.2.5-12/driver.c 2005-08-14 00:29:02.000000000 +0200
+++ fetchmail-6.2.5-12sarge1/driver.c 2005-08-14 00:29:23.000000000 +0200
@@ -426,11 +426,8 @@
/* for POP3, we can get the size of one mail only! Unfortunately, this
* protocol specific test cannot be done elsewhere as the protocol
* could be "auto". */
- switch (ctl->server.protocol)
- {
- case P_POP3: case P_APOP: case P_RPOP:
+ if (ctl->server.protocol == P_POP3) fetchsizelimit = 1;
- }
/* Time to allocate memory to store the sizes */ xalloca(msgsizes, int *, sizeof(int) * fetchsizelimit);
Regards,
Arnaud
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)
Versions of packages fetchmail depends on:
ii adduser 3.63 Add and remove users and groups
ii base-files 3.1.2 Debian base system miscellaneous f
ii debconf 1.4.30.13 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
Message-ID: <email address hidden>
Date: Sun, 14 Aug 2005 10:39:04 +0200
From: Arnaud Giersch <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: fetchmail: lost patch: APOP and default fetchsizelimit
Package: fetchmail
Version: 6.2.5-12sarge1
Severity: normal
Hello,
I use APOP authentication to retrieve my mails with fetchmail. Since
last security update, it doesn't work any more when there are several
mails to fetch:
fetchmail: 4 messages for XXX at XXX (3180 octets).
fetchmail: cannot get a range of message sizes (1-4).
fetchmail: client/server protocol error while fetching from XXX
fetchmail: Query status=4 (PROTOCOL)
A workaround is to add "fetchsizelimit 1" in the procmailrc
configuration file.
A quick diff between fetchmail-6.2.5-12 and fetchmail- 6.2.5-12sarge1
shows that the following patch was lost between the two releases:
diff -Naur fetchmail- 6.2.5-12/ driver. c fetchmail- 6.2.5-12sarge1/ driver. c 6.2.5-12/ driver. c 2005-08-14 00:29:02.000000000 +0200 6.2.5-12sarge1/ driver. c 2005-08-14 00:29:23.000000000 +0200 protocol) protocol == P_POP3)
fetchsizel imit = 1;
--- fetchmail-
+++ fetchmail-
@@ -426,11 +426,8 @@
/* for POP3, we can get the size of one mail only! Unfortunately, this
* protocol specific test cannot be done elsewhere as the protocol
* could be "auto". */
- switch (ctl->server.
- {
- case P_POP3: case P_APOP: case P_RPOP:
+ if (ctl->server.
- }
/* Time to allocate memory to store the sizes */
xalloca( msgsizes, int *, sizeof(int) * fetchsizelimit);
Regards,
Arnaud
-- System Information: ISO-8859- 15)
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=
Versions of packages fetchmail depends on:
ii adduser 3.63 Add and remove users and groups
ii base-files 3.1.2 Debian base system miscellaneous f
ii debconf 1.4.30.13 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
-- no debconf information