Re: 'spamc/spamassassin' crashing with overlong blank line spams?

On Wed, 2007-09-19 at 00:54 -0400, Matt Kettler wrote:
> Chr. v. Stuckrad wrote:

> > Seemingly our spamc (3.1.9, not yet 3.2.*) can not
> > transfer a special kind of current spam to a remote
> > spamd. Those Mails always produce '0/0' instead
> > of usable reports.
> >
> > You can see something like the Mail I analyzed
> > at http://page.mi.fu-berlin.de/stucki/mail.txt
> > (I had change the offending line for the browser too,
> > so at the end you seen a descriptive line only)

Seen a few of these, too.

Sep 19 18:34:49 delta spamd[11309]: spamd: processing message <01c7fabb$ee4cafe0$a48b1b7d@akstcadeptamnsdgs> for guenther:1003
Sep 19 18:34:50 delta spamd[7781]: spamd: handled cleanup of child pid 11309 due to SIGCHLD
Sep 19 18:34:50 delta spamd[7781]: prefork: child states: I
Sep 19 18:34:50 delta spamd[7781]: spamd: server successfully spawned child process, pid 11469
Sep 19 18:34:50 delta spamd[7781]: prefork: child states: II

> > Is this a known failure of the old spamc?

This isn't limited to 3.1.x, running 3.2.0 here.

# spamassassin --version
SpamAssassin version 3.2.0
  running on Perl version 5.8.8

> If you can provide a copy of the actual email somewhere, (I can download
> it with wget, or you can zip/gzip/whatever it) I can run it through
> spamc on my test box and see what it does.

Matt, I'll send you one of these in a minute.

> > PS.: Ideas welcome for catching the characteristic Subject of
> > those spams, which look like 'just random tty line noise'!
>
> Something like this might be a first shot:

Do you need help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related spamassassin.apache.org Links users Request more information about Pantek

How so? Since these mails are killing spamd, what use is it to throw yet another rule at it?

  guenther

-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}