[exim] Re: Bug in Exim - duplicating messages

> Version of Exim:       4.43, + Exiscan patch
> Operating System:      Debian Sarge
> URL will full details: http://www.lubemobile.com.au/ras/exim

1.  A new address is added with a redirect router with the unseen
    directive.

3.  The new address is moved to the front of deliver.c's delivery
    queue by another re-direct router.

4.  A "control = queue_only" is in effect (perhaps - not sure about
    this one).

#!/bin/bash
#
# To run this script:
#
#   a.  Stop all Exim queue runners, and prevent any new ones from
#       starting.
#
#   b.  Create a new, empty directory.  Ensure the directory is
#       world readable, searchable and writable.  Ensure its parents
#       are all world readable and searchable.
#
#   c.  cd to the new directory.  Copy this script into it.
#
#   d.  Run the script as root.
#
# What it does:
#
#   This script demonstrates a bug in exim.  Under these conditions:
#
#     1. A new address is added with a redirect router with the
#        unseen directive.
#     2. There is a retry record pending for new address.
#     3. The new address is moved to the front of deliver.c's
#        delivery queue by another re-direct router.
#     4. "control = queue_only" is in effect (perhaps - not sure
#        about this one).
#     5. The original address can be successfully delivered to.
#
#   Every new queue runner will generate a duplicate email to
#   the original address until the defer expires.
#
#   The script doesn't do any real deliveries.  Instead, the
#   delivery is handled by the the lmtp emulation below, which
#   just records all successful delivery attempts.
#
# Outputs:
#
#   - A list of deliveries made by exim is printed on stdout.
#     If exim worked there should only be one to each address.
#   - A number of exim -d+all logs are created in the current
#     directory.
#   - The configuration file used is left in the current
#     directory.
#

  while :
  do
    while read line
    do
      case "$line" in D*) break;; esac
      case "$line" in Q*) echo "221 2.0.0 Goodbye Exim!"; exit;; esac
      case "$line" in R*) rcpt=${line#*:}; rcpts="$rcpts ${rcpt%?}";; esac
      echo "220 Thank you Exim!"
    done

    echo "354 Go Exim!"
    reply=
    while :
    do
      case "$line" in 421*) reply="421 Error!";; esac
      case "$line" in .*) break;; esac
      read line
    done

    if [[ -n "$reply" ]]
    then
      echo $reply
      exit
    else
      d=
      for f in $rcpts
      do
    [[ -z "$d" ]] || echo "250 2.0.0 $d OK" | tee --append $dir/bug-lmtp-deliveries.log
    d=$f
      done
      echo "250 2.0.0 $d OK" | tee --append $dir/bug-lmtp-deliveries.log
    fi
  done
fi

[[ $(id -u) = 0 ]] || {
    echo 1>&2 "$0: I must be run as root!"
    exit 1
  }

exim4 -C $PWD/bug-exim.conf -q            # A queue runner to the retry record
exim4 -Mrm $(exipick -r '.@www\.exim\.org' -i)    # Don't need that message any more

exim4 -Mrm $(exipick -r '.@www\.exim\.org' -i)    # Don't need that message any more