#50977 [Opn->Fbk]: imap_headerinfo Address buffer overflow

ID: 50977 Updated by: pajoye@php.net Reported By: lokitek at gmail dot com -Status: Open +Status: Feedback Bug Type: Reproducible crash Operating System: CentOS 5.4 PHP Version: 5.2.12 New Comment: Which imap version do you use? Previous Comments: ------------------------------------------------------------------------ [2010-02-09 19:00:23] lokitek at gmail dot com Description: ------------ While using the imap_headerinfo() function to obtain information about emails that I check via IMAP, I noticed that PHP complained about imap_headerinfo() Address buffer overflow. A bit of investigation revealed that a spam message containing 500+ CC email addresses caused this issue. Reproduce code: --------------- // Send an email with 500+ CCd users. then use imap_headerinfo() to // obtain all header information. // [from doc] $mBox = imap_open("{host:143/imap/novalidate-cert}INBOX}", $username, $password); // open as imap $header = imap_header($mBox, 1); // get first mails header // imap_headerinfo() will crash with the following error: // PHP Fatal error: imap_headerinfo(): Address buffer overflow Expected result: ---------------- I expect to information about the given message number by reading its headers and returned in an object format Actual result: -------------- PHP Fatal error: imap_headerinfo(): Address buffer overflow ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=50977&edit=1