process-mail dies on malformed email addresses

Bug #687446 reported by Aaron Bentley
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Critical
Curtis Hovey

Bug Description

If the To or CC header of an email contains entries that lack an '@', an oops like OOPS-1803C4636 will result.

Such emails are unlikely to be generated by users, because normal mail programs usually determine the SMTP TO from the user-entered To, CC and BCC values, and copy them into the To and Cc headers. The email that produced this oops was spam.

This bug could be fixed by making processing more tolerant of invalid email addresses, or by using X-Original-To instead of To+CC. X-Original-To will always be a valid address, since it's inserted by the mail delivery system.

Revision history for this message
Gary Poster (gary) wrote :

See RT 37768 re X-Original-To

Changed in launchpad-foundations:
status: New → Triaged
importance: Undecided → High
Revision history for this message
Robert Collins (lifeless) wrote :

We really don't want process-mail dying, so this meets the oops policy.

Changed in launchpad:
importance: High → Critical
tags: added: oops
Revision history for this message
Martin Pool (mbp) wrote :

As well as the specific case mentioned here, there are also many failures due to unicode errors, eg

2012-03-20 22:00:44 ERROR An exception was raised inside the handler:
http://launchpadlibrarian.net/97631604/245b4198-72d8-11e1-a8a6-001e0bc3957e.txt
 -> http://launchpadlibrarian.net/97631605/nWgbd1SJsILyTRyy9pThN07NLlx.txt ('mar\<email address hidden>' is not US-ASCII)

Many of the ones I've looked at seem to be spam and perhaps they really are malformed, but that probably constitutes an expected error and shouldn't be an oops.

There might be other cases where the encoding is actually valid and we're reading it wrong.

William Grant (wgrant)
tags: added: email
Curtis Hovey (sinzui)
Changed in launchpad:
assignee: nobody → Curtis Hovey (sinzui)
Curtis Hovey (sinzui)
Changed in launchpad:
status: Triaged → In Progress
Curtis Hovey (sinzui)
Changed in launchpad:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.