https://bugs.exim.org/show_bug.cgi?id=3056
Bug ID: 3056
Summary: Distinct tags with same first letter overwrite each
other
Product: Exim
Version: N/A
Hardware: x86
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: DKIM
Assignee: tom@???
Reporter: max@???
CC: exim-dev@???
When DKIM-Signature contains "d=" and "darn=" tags (observed in the wild from
google), value of the latter overwrites the former. This happens because
pdkim_parse_sig_header() has a switch only on the first char of cur_tag->s.
The tag is possibly related to
https://datatracker.ietf.org/doc/draft-chuang-replay-resistant-arc/
Possible fix is
https://github.com/darkwrat/exim/commit/c1314a753a089706a1c3712d9bc918fdcbc5df54
-- applied internally in september, no issue since.
--
You are receiving this mail because:
You are on the CC list for the bug.
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-dev.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-dev-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/