#50977 [Com]: imap_headerinfo Address buffer overflow

ID: 50977 Comment by: lokitek at gmail dot com Reported By: lokitek at gmail dot com Status: Feedback Bug Type: Reproducible crash Operating System: CentOS 5.4 PHP Version: 5.2.12 New Comment: I don't think that it makes a huge difference, but I just realized that I'm on php-5.2.11 and using php-imap-5.2.11 If this isn't what you're after, just let me know and I can do a bit of debugging all around. Thanks! Previous Comments: ------------------------------------------------------------------------ [2010-02-09 19:06:57] pajoye@php.net Which imap version do you use? ------------------------------------------------------------------------ [2010-02-09 19:00:23] lokitek at gmail dot com Description: ------------ While using the imap_headerinfo() function to obtain information about emails that I check via IMAP, I noticed that PHP complained about imap_headerinfo() Address buffer overflow. A bit of investigation revealed that a spam message containing 500+ CC email addresses caused this issue. Reproduce code: --------------- // Send an email with 500+ CCd users. then use imap_headerinfo() to // obtain all header information. // [from doc] $mBox = imap_open("{host:143/imap/novalidate-cert}INBOX}", $username, $password); // open as imap $header = imap_header($mBox, 1); // get first mails header // imap_headerinfo() will crash with the following error: // PHP Fatal error: imap_headerinfo(): Address buffer overflow Expected result: ---------------- I expect to information about the given message number by reading its headers and returned in an object format Actual result: -------------- PHP Fatal error: imap_headerinfo(): Address buffer overflow ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=50977&edit=1