[imp] malformated mailheader causes apache-segfault

[Andrew Morgan]

On Thu, 26 Jun 2003, Joerg Friedrich wrote:

> Hi,
>
> Today one of our users received a mail with a to:-header like this:
>
> ------
> To: "someone at uni-konstanz.de,someother at uni-konstanz.de,
>      lots-of-addresses at uni-konstanz.de,...
>      ...
>      ...
>      ...
>      ...
>      ...
>      ...
>      ...
>      hugo.habicht at uni-konstanz.de, last.address"@uni-konstanz.de>
>
> --
>
>
> The result is that the mailbox-overview containing this message cannot
> displayed. And the apache process dies with a segmentation fault.
>
> Note the problem is the ""-String spanning nearly ten lines. and this
> ""-String contained more than 1200 characters. php didn't log any error.
> So I think this is a problem in libc-client, but I want to confirm this.

Most likely this is a bug in PHP.  There are several IMAP bugs in PHP that
have been fixed in 4.3.0, 4.3.1, and 4.3.2 of PHP.  I'd recommend trying
the latest version of PHP to verify.

	Andy