process-mail dies on malformed email addresses

Bug #687446 reported by Aaron Bentley on 2010-12-08
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Curtis Hovey

Bug Description

If the To or CC header of an email contains entries that lack an '@', an oops like OOPS-1803C4636 will result.

Such emails are unlikely to be generated by users, because normal mail programs usually determine the SMTP TO from the user-entered To, CC and BCC values, and copy them into the To and Cc headers. The email that produced this oops was spam.

This bug could be fixed by making processing more tolerant of invalid email addresses, or by using X-Original-To instead of To+CC. X-Original-To will always be a valid address, since it's inserted by the mail delivery system.

Gary Poster (gary) wrote :

See RT 37768 re X-Original-To

Changed in launchpad-foundations:
status: New → Triaged
importance: Undecided → High
Robert Collins (lifeless) wrote :

We really don't want process-mail dying, so this meets the oops policy.

Changed in launchpad:
importance: High → Critical
tags: added: oops
Martin Pool (mbp) wrote :

As well as the specific case mentioned here, there are also many failures due to unicode errors, eg

2012-03-20 22:00:44 ERROR An exception was raised inside the handler:
 -> ('mar\<email address hidden>' is not US-ASCII)

Many of the ones I've looked at seem to be spam and perhaps they really are malformed, but that probably constitutes an expected error and shouldn't be an oops.

There might be other cases where the encoding is actually valid and we're reading it wrong.

William Grant (wgrant) on 2012-10-22
tags: added: email
Curtis Hovey (sinzui) on 2012-12-03
Changed in launchpad:
assignee: nobody → Curtis Hovey (sinzui)
Curtis Hovey (sinzui) on 2012-12-05
Changed in launchpad:
status: Triaged → In Progress
Curtis Hovey (sinzui) on 2012-12-05
Changed in launchpad:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers