Mailing List Archive

[Bug 2733] New: log_file_path=syslog null-pointeer dereference breakage on local delivery with allow_insecure_taint_data patch
https://bugs.exim.org/show_bug.cgi?id=2733

Bug ID: 2733
Summary: log_file_path=syslog null-pointeer dereference
breakage on local delivery with
allow_insecure_taint_data patch
Product: Exim
Version: 4.94
Hardware: x86
URL: https://bugs.debian.org/988086
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Logging
Assignee: unallocated@exim.org
Reporter: eximusers@bebt.de
CC: exim-dev@exim.org

Hello,

with the allow_insecure_taint_data patch local delivery crash if
log_file_path = syslog
is set.

19:27:43 48586 daemon-accept-delivery forked for delivery-local: 48588
19:27:43 48588 postfork: delivery-local
19:27:43 48588 delivery-local forking for logfile-open
19:27:43 48588 delivery-local forked for logfile-open: 48589
19:27:43 48589 postfork: logfile-open
19:27:43 48588 LOG: PANIC DIE
19:27:43 48588 Cannot open main log file "": Permission denied: euid=0
egid=117


(gdb) bt
#0 0x000055ebf469d87c in log_open_already_exim (name=0x7ffcc589d560 "")
at log.c:288
#1 0x000055ebf469dadf in log_open_as_exim (name=name@entry=0x7ffcc589d560 "")
at log.c:416
#2 0x000055ebf469de8d in open_log (fd=fd@entry=0x55ebf476aed0 <mainlogfd>,
type=type@entry=0, tag=tag@entry=0x0) at log.c:552
#3 0x000055ebf469e86b in open_logs () at log.c:1512
#4 0x000055ebf46f61e8 in appendfile_transport_setup (tblock=0x55ebf675a688,
addrlist=<optimized out>, dummy=<optimized out>, uid=<optimized out>,
gid=<optimized out>, errmsg=0x55ebf6764908) at appendfile.c:238
#5 0x000055ebf466cc6d in deliver_local (addr=addr@entry=0x55ebf6764838,
shadowing=shadowing@entry=0) at deliver.c:2322
#6 0x000055ebf4677bc9 in do_local_deliveries () at deliver.c:3015
#7 deliver_message (id=id@entry=0x55ebf675ad21 "1ldz84-0001x1-8V",
forced=forced@entry=1, give_up=give_up@entry=0) at deliver.c:7209
#8 0x000055ebf46a7f9f in queue_run (start_id=start_id@entry=0x0,
stop_id=stop_id@entry=0x0, recurse=recurse@entry=0) at queue.c:662
#9 0x000055ebf465aac9 in main (argc=2, cargv=<optimized out>) at exim.c:4715

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##