Filter Coding Issues

Question

I've been following (roughly) the simple virus scanner interface that SUN provides, and adapted it into a slightly heavier weight filter that interfaces with libclamav. At first both were compiled using GCC, and I thought due to some of the weird problems I had when debugging flags were inserted, maybe Sun Studio would give better results. It hasn't, and I'm at a bit of a loss as to what to do next.
The symptom is that parts of the message just dissapear, and I see the old mime boundaries within the message body, so it seems like there's some pointer indicating where the message starts that's being corrupted by something in my code.
Interestingly, if I stop processing the message while still inside the headers, there is no problem, but that's not a very effective virus scanner if it can only look at the content type and filename of the part now is it?
This happens regardless of whether I use GCC or CC, and I'm using 0.88.1 of clamav. The output message is shown last. It should be fairly obvious what's wrong with it.
Here's my code, perhaps someone can tell me what I'm doing wrong.
** WARNING ** This IS NOT polished code, so please don't expect it to be perfect. It's clean, but includes absolute pathnames, and some other nauties that should be removed before anyone even thinks of reusing this. Once it actually works, I'll do the nessisary code cleanup, and release this to the community to do whatever anyone wants with.
Makefile
SERVER_ROOT=/opt/SUNWmsgsr
INSTALL_LOCATION=/var/opt/SUNWmsgsr/site-programs/
INCLUDE=-I${SERVER_ROOT}/include
LIBPATH=-L${SERVER_ROOT}/lib
CLAMLIBS=`/usr/local/bin/clamav-config --libs` -lclamav
CLAMFLAGS=`/usr/local/bin/clamav-config --cflags`
LIBS=-lmtasdk ${CLAMLIBS}
FLAGS=${CLAMFLAGS}
all:
        cc ${FLAGS} -o msgsr_clamav msgsr_clamav.c \
                ${INCLUDE} ${LIBPATH} ${LIBS}
install:
        cp msgsr_clamav ${INSTALL_LOCATION}
        cp msgsr_clamav.cnf ${INSTALL_LOCATION}************************************************
Expansions
CLAMLIBS=-L/usr/local/lib -lz -lbz2 -lpthread -lclamav
CLAMFLAGS=-I/usr/local/include -xO4************************************************
msgsr_clamav.c
* msgsr_clamav
* Interface the Sun Java System Message Server with LibClamAV
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <ctype.h>
#include <pthread.h>
#include "clamav.h"     // LibClamAV Header
#include "mtasdk.h"
* A structure to store channel options
typedef struct {
     /* Produce debug output? */
     int debug;
     // Maximum size (in bytes) attachment to scan
     int scan_maxsize;
     // Scan recursion level
     int scan_recursion_level;
     // Max files
     int scan_maxfiles;
     // Path to ClamAV Virus Database
     char db_dir[BIGALFA_SIZE+3];
     // Used Internally by ClamAV. Stored here for ease of access
     struct cl_node *root;
     unsigned int signo;
     struct cl_stat dbstat;
     pthread_mutex_t reload_mutex;
     // MIME types to ignore
     char ignore_mime_types[BIGALFA_SIZE+3];
     // Types of files to ignore
     char ignore_file_types[BIGALFA_SIZE+3];
     /* Unwanted MIME content types (ALWAYS stripped, never scanned) */
     char bad_mime_types[BIGALFA_SIZE+3];
     /* Unwanted file types (ALWAYS stripped, never scanned)*/
     char bad_file_types[BIGALFA_SIZE+3];
     /* Length of bmt string */
     size_t bmt_len;
     /* Length of bft string */
     size_t bft_len;
} our_options_t;
// A structure passed per message to contain message specific data, including open files, etc.
typedef struct {
     // The filename of the temp file in use so it can be unlinked when we're done with it.
     char temp_file_name[BIGALFA_SIZE * 2 + 10];
     // The file * to the temp file in use, so we don't have to reopen it across calls to decode_inspect
     FILE *temp_file;
     // A pointer to the single instance of our_options_t that is shared across all threads
     our_options_t * options;
} msg_temp_data_t;
* Forward declarations
static void error_exit(int ires, const char *msg);
static void error_report(our_options_t *options, int ires, const char *func);
static void error_reports(our_options_t *options, const char* errStr, const char *func);
static int is_bad_mime_type(our_options_t *options, mta_decode_t *dctx, char *buf, size_t maxbuflen);
static int is_bad_file_type(our_options_t *options, mta_opt_t *params, const char *param_name, char *buf, size_t maxbuflen);
static int load_options(our_options_t *options);
static mta_dq_process_message_t process_message;
static mta_decode_read_t decode_read;
static mta_decode_inspect_t decode_inspect;
* main() -- Initialize the MTA SDK, load our options, and then
* start the message processing loop.
int main()
     int ires,ret;
     char error_msg[BIGALFA_SIZE+3];
     our_options_t options;
     * Initialize the MTA SDK
     * See explanatory comment 1
     if ((ires = mtaInit(0)))
          error_exit(ires, "Unable to initialize the MTA SDK");
     * Load our channel options
     * See explanatory comment 2
     if ((ires = load_options(&options)))
          error_exit(ires, "Unable to load our channel options");
     * Initialize the ClamAV Virus Engine and Database
     // Preconditions to initializing the ClamAV database
     options.root=NULL; options.signo=0;
     // Load the virus database
     mtaLog("cl_loaddbdir() loading database from %s",options.db_dir);
     if ((ret = cl_loaddbdir(options.db_dir, &options.root, &options.signo)))
          sprintf(error_msg,"cl_loaddbdir() error: %s", cl_strerror(ret));
          error_exit(MTA_NO,error_msg);
     mtaLog("cl_loaddbdir() loaded %d virus definitions",options.signo);
     // Internalize the virus database structure
     mtaLog("cl_build() initializing database");
     if((ret = cl_build(options.root)))
          sprintf(error_msg,"cl_build() error: %s", cl_strerror(ret));
          error_exit(MTA_NO,error_msg);
     // Keep track of database updates
     memset(&options.dbstat, 0, sizeof(struct cl_stat));
     cl_statinidir(options.db_dir, &options.dbstat);
     // Initialize our reload mutex
     if (ret = pthread_mutex_init(&options.reload_mutex,NULL))
          sprintf(error_msg,"pthread_mutex_init() error: %d", ret);
          error_exit(MTA_NO,error_msg);
     * Now process the queued messages. Be sure to indicate a
     * thread stack size sufficient to accomodate message
     * enqueue processing.
     * See explanatory comment 3
     if ((ires = mtaDequeueStart((void *)&options,
     process_message, NULL, 0)))
     error_exit(ires, "Error during dequeue processing");
     * All done
     cl_free(options.root);
     mtaDone();
     return(0);
*Reloads the virus database and re-initializes the in memory structure
* Loads a new virus database, then if all succeeds, it
* swaps the new database with the old one.  It's assumed
* clamav releases the database gracefully, but another mutex
* may be required if this is not the case.
static int reload_database(our_options_t *options)
     struct cl_node *newroot = NULL,*oldroot;
     char error_msg[BIGALFA_SIZE+3];
     int ret;
     unsigned int signo=0;
     if (pthread_mutex_trylock(&options->reload_mutex)) {     // Only one reload at a time thank you.
          if(cl_statchkdir(&options->dbstat) == 1) {     // Make sure we actually need an update
               mtaLog("reload_database() Virus database is stale... reloading");
               mtaLog("cl_loaddbdir() reloading database from %s",options->db_dir);
               // Load the new virus database
               if ((ret = cl_loaddbdir(options->db_dir, &newroot, &signo)))
                    mtaLog("cl_loaddbdir() error: %s", cl_strerror(ret));
                    return (-1);
               mtaLog("cl_loaddbdir() loaded %d virus definitions",options->signo);
               // Internalize the virus database structure
               mtaLog("cl_build() re-initializing database");
               if((ret = cl_build(newroot)))
                    mtaLog("cl_build() error: %s", cl_strerror(ret));
                    mtaLog("reload_database() Database reload aborted");
                    cl_free(newroot);
                    return (-2);
               // Save a pointer to the old root
               oldroot = options->root;
               // Swap in the new root and signo
               options->root = newroot;
               options->signo = signo;
               // Release the old root
               cl_free(oldroot);
               mtaLog("database_reload() Successfully loaded new virus database");
               // Keep track of database updates
               cl_statfree(&options->dbstat);
               cl_statinidir(options->db_dir, &options->dbstat);
          pthread_mutex_unlock(&options->reload_mutex);
* process_message() -- This routine is called by
* mtaDequeueStart() to process each queued
* message. We don&#31258; make use of ctx2, but
* ctx1 is a pointer to our channel options.
* See explanatory comment 4
static int process_message(void **ctx2, void *ctx1, mta_dq_t *dq, const char *env_from, size_t env_from_len)
     const char *adr;
     int disp, ires;
     size_t len;
     mta_nq_t *nq;
     msg_temp_data_t msg_data;
     * Initializations
     nq = NULL;
     msg_data.options = (our_options_t *)ctx1;
     msg_data.temp_file = NULL;
     * Check the virus database to make sure it isn't stale
     * If it it's not currently reloading, and is stale, reload it.
     //if(cl_statchkdir(&(msg_data.options->dbstat)) == 1)
     //     reload_database(msg_data.options);
     * A little macro to do error checking on mta*() calls
     #define CHECK(f,x) \
     if ((ires = x)) { error_report(msg_data.options, ires, f); goto \
          done_bad; }
     * Start a message enqueue. Use the dequeue context to copy
     * envelope flags fromt the current message to this new
     * message being enqueued.
     * See explanatory comment 5
     CHECK("mtaEnqueueStart", mtaEnqueueStart(&nq, env_from, env_from_len, MTA_DQ_CONTEXT, dq, 0));
     * Process the envelope recipient list
     * See explanatory comment 6
     while (!(ires = mtaDequeueRecipientNext(dq, &adr, &len, 0)))
          * Add this envelope recipient address to the message
          * being enqueued. Use the dequeue context to copy
          * envelope flags for this recipient from the current
          * message to the new message.
          ires = mtaEnqueueTo(nq, adr, len, MTA_DQ_CONTEXT,
          dq, MTA_ENV_TO, 0);
          /* See explanatory comment 7 */
          disp = (ires) ? MTA_DISP_DEFERRED : MTA_DISP_RELAYED;
          CHECK("mtaDequeueRecipientDisposition", mtaDequeueRecipientDisposition(dq, adr, len,disp, 0));
     * A normal exit from the loop occurs when
     * mtaDequeueRecipientNext() returns an MTA_EOF status.
     * Any other status signifies an error.
     if (ires != MTA_EOF)
          error_report(msg_data.options, ires, "mtaDequeueRecipientNext");
          goto done_bad;
     * Begin the MIME decode of the message
     * See explanatory comment 8
     CHECK("mtaDecodeMessage",
          mtaDecodeMessage(
          /* Private context is our message data structure */
          (void *)&msg_data,
          /* Input is the message being dequeued */
          MTA_DECODE_DQ, (void *)dq,
          /* Output is the message being enqueued */
          MTA_DECODE_NQ, (void *)nq,
          /* Inspection routine */
          decode_inspect,
          /* Convert non-MIME formats to MIME */
          MTA_DECODE_THURMAN,
          0));
     * Finish the enqueue
     * NOTE: IT&#25285; IMPORTANT TO DO THIS before DOING THE
     * DEQUEUE. YOU WILL LOSE MAIL IF YOU DO THE DEQUEUE FIRST
     * and then THE ENQUEUE FAILS.
     * See explanatory text 9
     CHECK("mtaEnqueueFinish", mtaEnqueueFinish(nq, 0));
     nq = NULL;
     * Finish the dequeue
     CHECK("mtaDequeueFinish", mtaDequeueMessageFinish(dq, 0));
     * All done with this message
     return(MTA_OK);
done_bad:
     * Abort any ongoing enqueue or dequeue
     if (nq)
          mtaEnqueueFinish(nq, MTA_ABORT, 0);
     if (dq)
          mtaDequeueMessageFinish(dq, MTA_ABORT, 0);
     * And return our error status
     return(ires);
#undef CHECK
* decode_inspect() -- This is the routine that inspects each
* message part, deciding whether to accept
* or reject it.
* See explanatory comment 10
static int decode_inspect(void *ctx, mta_decode_t *dctx, int data_type,const char *data, size_t data_len)
     char buf[BIGALFA_SIZE * 2 + 10];
     const char *virname;
     int i;
     static unsigned int part_c = 1;
     msg_temp_data_t *msg_data = (msg_temp_data_t *)ctx;
     strncpy(buf,data,data_len);
     buf[data_len] = 0;
     mtaLog("decode_inspect() (%d,%ud): %s",data_type,dctx,buf);
     switch (data_type)
          case MTA_DATA_HEADER:
          * See if the part has:
          * 1. A bad MIME content-type,
          * 2. A bad file name extension in the (deprecated)
          * NAME= content-type parameter, or
          * 3. A bad file name extension in the
          * FILENAME= content-disposition parameter.
          i = 0;
          if ((i = is_bad_mime_type((void *)msg_data->options, dctx, buf, sizeof(buf))) ||
               is_bad_file_type((void *)msg_data->options,mtaDecodeMessageInfoParams(dctx,MTA_DECODE_CTYPE_PARAMS, NULL),"NAME", buf, sizeof(buf)) ||
               is_bad_file_type((void *)msg_data->options,mtaDecodeMessageInfoParams(dctx,MTA_DECODE_CDISP_PARAMS, NULL),"FILENAME", buf, sizeof(buf)))
               char msg[BIGALFA_SIZE*4 + 10];
               * Replace this part with a text message indicating
               * that the part&#30196; content has been deleted.
               * See explanatory comment 11
               if (i)
                    i = sprintf(msg,
                         "The content of this message part has been removed.\n"
                         "It contained a potentially harmful media type of %.*s",
                         strlen(buf)-2, buf+1);
               else
                    i = sprintf(msg,
                         "The content of this message part has been removed.\n"
                         "It contained a potentially harmful file named '%s'", buf);
               mtaLog("decode_inspect(): %s",msg);
               return(mtaDecodeMessagePartDelete(dctx,
                    MTA_REASON, msg, i,
                    MTA_DECODE_CTYPE, "text", 4,
                    MTA_DECODE_CSUBTYPE, "plain", 5,
                    MTA_DECODE_CCHARSET, "us-ascii", 8,
                    MTA_DECODE_CDISP, "inline", 6,
                    MTA_DECODE_CLANG, "en", 2, 0));
          } break; // case MTA_DATA_HEADER:
          case MTA_DATA_TEXT:
          case MTA_DATA_BINARY:
               if (msg_data->temp_file == NULL)
                    sprintf(msg_data->temp_file_name,"/tmp/%i.tmp",part_c++);
                    mtaLog("messageDecode(): Opening Temp File %s",msg_data->temp_file_name);
                    msg_data->temp_file = fopen(msg_data->temp_file_name,"wb");
               fwrite(data,data_len,1,msg_data->temp_file);
               return(MTA_OK);
               break;
          case MTA_DATA_NONE:
               fflush(msg_data->temp_file);
               fclose(msg_data->temp_file);
               msg_data->temp_file = NULL;
               struct cl_limits limits;
               memset(&limits, 0, sizeof(struct cl_limits));
               /* maximal number of files in archive */;
               limits.maxfiles = 1000;
               /* maximal archived file size */
               limits.maxfilesize = 10 * 1048576; /* 10 MB */
               /* maximal recursion level */
               limits.maxreclevel = 5;
               /* maximal compression ratio */
               limits.maxratio = 200;
               /* disable memory limit for bzip2 scanner */
               limits.archivememlim = 0;
               i = cl_scanfile(msg_data->temp_file_name, &virname, NULL, msg_data->options->root,&limits,CL_SCAN_STDOPT);
               unlink (msg_data->temp_file_name);
               if(i == CL_VIRUS) {
                    char msg[BIGALFA_SIZE*4 + 10];
                    size_t idlen;
                    i = sprintf(msg,
                         "The content of this message part has been removed.\n"
                         "It contained the virus %s in a file named '%s'", virname,buf);
                    mtaDequeueInfo(dctx,MTA_ENV_ID,&buf,&idlen);
                    buf[idlen] = '\0';
                    mtaLog("decode_inspect(): Detected %s virus in part %i of msg ID %s",virname,0,buf);
                    return(mtaDecodeMessagePartDelete(dctx,
                         MTA_REASON, msg, i,
                         MTA_DECODE_CTYPE, "text", 4,
                         MTA_DECODE_CSUBTYPE, "plain", 5,
                         MTA_DECODE_CCHARSET, "us-ascii", 8,
                         MTA_DECODE_CDISP, "inline", 6,
                         MTA_DECODE_CLANG, "en", 2, 0));
               } else {
                    if(i != CL_CLEAN)
                         mtaLog("decode_inspect() Error: %s scanning file %s",cl_strerror(i),msg_data->temp_file_name);
                    else
                         mtaLog("decode_inspect(): Part in file %s is clean",msg_data->temp_file_name);
                    //return(mtaDecodeMessagePartCopy(dctx, 0));
                    return(MTA_OK); break;
     return(MTA_OK);
* is_bad_mime_type() -- See if the part&#30196; media type is in our
* bad MIME content types, for example:
* application/vbscript
* See explanatory comment 13
static int is_bad_mime_type(our_options_t *options,
mta_decode_t *dctx, char *buf,
size_t maxbuflen)
     const char *csubtype, *ctype;
     size_t i, len1, len2;
     char *ptr;
     * Sanity checks
     if (!options || !options->bmt_len ||
          !options->bad_mime_types[0] ||
          !dctx)
          return(0);
     * Get the MIME content type
     ctype = mtaDecodeMessageInfoString(dctx, MTA_DECODE_CTYPE,NULL, &len1);
     csubtype = mtaDecodeMessageInfoString(dctx,MTA_DECODE_CSUBTYPE,NULL, &len2);
     * Build the string: <0x01>type/subtype<0x01><0x00>
     ptr = buf;
     *ptr++ = (char)0x01;
     for (i = 0; i < len1; i++)
          *ptr++ = tolower(*ctype++);
     *ptr++ = '/';
     for (i = 0; i < len2; i++)
          *ptr++ = tolower(*csubtype++);
     *ptr++ = (char)0x01;
     *ptr = '\0';
     * Now see if the literal just built occurs in the list of
     * bad MIME content types
     return((strstr(options->bad_mime_types, buf)) ? -1 : 0);
* is_bad_file_type() -- See if the part has an associated file
* name whose file extension is in our list
* of bad file names, such as .vbs.
* See explanatory comment 14
static int is_bad_file_type(our_options_t *options,
mta_opt_t *params,
const char *param_name, char *buf,
size_t maxbuflen)
     const char *ptr1;
     char fext[BIGALFA_SIZE+2], *ptr2;
     size_t i, len;
     * Sanity checks
     if (!options || !options->bft_len || !params || !param_name)
          return(0);
     len = 0;
     buf[0] = '\0';
     if (mtaOptionString(params, param_name, 0, buf, &len,
          maxbuflen - 1) ||
          !len || !buf[0])
          * No file name parameter specified
          return(0);
     * A file name parameter was specified. Parse it to
     * extract the file extension portion, if any.
     ptr1 = strrchr(buf, '.');
     if (!ptr1)
          * No file extension specified
          return(0);
     * Now store the string created earlier in fext[]
     * Note that we drop the &#12539;&#12539;from the extension.
     ptr1++; /* Skip over the &#12539;&#12539;*/
     ptr2 = fext;
     *ptr2++ = (char)0x01;
     len = len - (ptr1 - buf);
     for (i = 0; i < len; i++)
          *ptr2++ = tolower(*ptr1++);
     *ptr2++ = (char)0x01;
     *ptr2++ = '\0';
     * Now return -1 if the string occurs in
     * options->bad_file_types.
     return((strstr(options->bad_file_types, fext)) ? -1 : 0);
* load_options() -- Load our channel options from the channel&#30196;
* option file
* See explanatory comment 15
static int load_options(our_options_t *options)
     char buf[BIGALFA_SIZE+1];
     size_t buflen, i;
     mta_opt_t *channel_opts;
     int ires;
     const char *ptr0;
     char *ptr1;
     * Initialize the our private channel option structure
     memset(options, 0, sizeof(our_options_t));
     * Set internal defaults for important features
     options->scan_maxsize = 10 * 1024 * 1024; // 10 MB
     options->scan_recursion_level = 10;
     options->scan_maxfiles = 200;
     strcpy(options->db_dir,cl_retdbdir()); // Default ClamAV Directory
     * Access the channel&#30196; option file
     * See explanatory comment 16
     channel_opts = NULL;
     if ((ires = mtaOptionStart(&channel_opts, "/var/opt/SUNWmsgsr/site-programs/msgsr_clamav.cnf", 0, 0)))
          mtaLog("Unable to access our channel option file");
          return(ires);
     * DEBUG=0|1
     options->debug = 0;
     mtaOptionInt(channel_opts, "DEBUG", 0, &options->debug);
     if (options->debug)
          mtaDebug(MTA_DEBUG_SDK, 0);
     * BAD_MIME_TYPES=type1/subtype1[,type2/subtype2[,...]]
     buf[0] = '\0';
     mtaOptionString(channel_opts, "BAD_MIME_TYPES", 0, buf,
     &buflen, sizeof(buf));
     * Now translate the comma separated list:
     * Type1/Subtype1[,Type2/Subtype2[,...]]
     * to
     *<0x01>type1/subtype1[<0x01>type2/subtype2[<0x01>...]]<0x01>
     ptr0 = buf;
     ptr1 = options->bad_mime_types;
     *ptr1++ = (char)0x01;
     for (i = 0; i < buflen; i++)
          if (*ptr0 != ',')
               *ptr1++ = tolower(*ptr0++);
          else
               *ptr1++ = (char)0x01;
               ptr0++;
     *ptr1++ = (char)0x01;
     *ptr1 = '\0';
     options->bmt_len = ptr1 - options->bad_mime_types;
     * BAD_FILE_TYPES=["."]Ext1[,["."]Ext2[,...]]
     buf[0] = '\0';
     buflen = 0;
     mtaOptionString(channel_opts, "BAD_FILE_TYPES", 0, buf,
     &buflen, sizeof(buf));
     * Now translate the comma separated list:
     * ["."]Ext1[,["."]Ext2[,...]]
     * to
     * <0x01>ext1[<0x01>ext2[<0x01>...]]<0x01>
     ptr0 = buf;
     ptr1 = options->bad_file_types;
     *ptr1++ = (char)0x01;
     for (i = 0; i < buflen; i++)
          switch(*ptr0)
               default : /* copy after translating to lower case */
                    *ptr1++ = tolower(*ptr0++);
                    break;
               case '.' : /* discard */
                    break;
               case ',' : /* end current type */
                    *ptr1++ = (char)0x01;
                    ptr0++;
               break;
     *ptr1++ = (char)0x01;
     *ptr1 = '\0';
     options->bft_len = ptr1 - options->bad_file_types;
     * Dispose of the mta_opt_t context
     * See explanatory comment 17
     mtaOptionFinish(channel_opts);
     * And return a success
     return(MTA_OK);
* error_report() &#12539;Report an error condition when debugging is
* enabled.
static void error_report(our_options_t *options, int ires,
const char *func)
     if (options->debug)
          mtaLog("%s() returned %d; %s",
               (func ? func : "?"), ires, mtaStrError(ires,0));
static void error_reports(our_options_t *options, const char* errStr,
const char *func)
     if (options->debug)
          mtaLog("%s() reported: %s",
               (func ? func : "?"), errStr);
* error_exit() -- Exit with an error status and error message.
static void error_exit(int ires, const char *msg)
     mtaLog("%s%s%s", (msg ? msg : ""), (msg ? "; " : ""),
     mtaStrError(ires,0));
     exit(1);
msgsr_clamav.cnf
DEBUG=1
BAD_MIME_TYPES=application/vbscript
BAD_FILE_TYPES=bat,pif,vb,vbs,chs,exe************************************************
broken message
Return-path: <[email protected]>
Received: from virusscan-daemon.apple.california.com by apple.california.com
(Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
id <[email protected]> for [email protected]; Thu,
20 Apr 2006 07:30:13 -0700 (PDT)
Received: from california.com ([209.159.129.16])
by apple.california.com (Sun Java System Messaging Server 6.2-3.04 (built Jul
15 2005)) with ESMTP id <[email protected]> for
[email protected]; Thu, 20 Apr 2006 07:30:05 -0700 (PDT)
Received: from [61.23.221.222] by apple.california.com (mshttpd); Thu,
20 Apr 2006 14:30:05 +0000 (GMT)
Content-return: allowed
Date: Thu, 20 Apr 2006 14:30:05 +0000 (GMT)
From: [email protected]
Subject: Re: testing
In-reply-to: <[email protected]>
To: [email protected]
Message-id: <[email protected]>
MIME-version: 1.0
X-Mailer: Sun Java(tm) System Messenger Express 6.2-3.04 (built Jul 15 2005)
Content-type: multipart/alternative;
boundary="Boundary_(ID_iOVR4MBjhWJn/mh7Ij+BUQ)"
Content-language: en
X-Accept-Language: en
Priority: normal
References: <[email protected]>
Original-recipient: rfc822;[email protected]
This is a multi-part message in MIME format.
--Boundary_(ID_iOVR4MBjhWJn/mh7Ij+BUQ)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
Content-disposition: inline
Data is missing from here
----ec04832708e231d6e2f
--Boundary_(ID_iOVR4MBjhWJn/mh7Ij+BUQ)
Content-type: text/html; charset=us-ascii
Content-transfer-encoding: quoted-printable
Content-disposition: inline
Data is missing from here
nal Message -----=3Cbr=3EFrom=3A chales=40california=2Ecom=3Cbr=3EDate=3A=
Thursday=2C April 20=2C 2006 11=3A19 pm=3Cbr=3ESubject=3A testing=3Cbr=3E=
To=3A chales=40california=2Ecom=3Cbr=3E=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B 1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B=
3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B 5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B=
7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B 9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B=
1=3Cbr=3E=26gt=3B 2=3Cbr=3E=26gt=3B 3=3Cbr=3E=26gt=3B 4=3Cbr=3E=26gt=3B=
5=3Cbr=3E=26gt=3B 6=3Cbr=3E=26gt=3B 7=3Cbr=3E=26gt=3B 8=3Cbr=3E=26gt=3B=
9=3Cbr=3E=26gt=3B 0=3Cbr=3E=26gt=3B =3Cbr=3E=26gt=3B
----ec04832708e231d6e2f
--Boundary_(ID_iOVR4MBjhWJn/mh7Ij+BUQ)
Content-type: text/x-vcard; name=chales.vcf; charset=us-ascii
Content-transfer-encoding: base64
Content-disposition: attachment; filename=chales.vcf
Content-description: Card for <[email protected]>
bA0KdGVsO3dvcms6NTEwLTI4Ny04NDUwDQp1cmw6aHR0cDovL3d3dy5jYWxpZm9ybmlh
LmNvbS8NCm9yZzpDYWxpZm9ybmlhQ29tLCBJbmM7DQp2ZXJzaW9uOjIuMQ0KZW1haWw7
aW50ZXJuZXQ6Y2hhbGVzQGNhbGlmb3JuaWEuY29tDQp0aXRsZTpTeXN0ZW0gQWRtaW5p
c3RyYXRvcg0KZW5kOnZjYXJkDQo=
----ec04832708e231d6e2f--
Boundary_(ID_iOVR4MBjhWJn/mh7Ij+BUQ)

Answer 1

Ok, so it's not my code. Using the virus_scanner_simple.c example from SUN, if you change the decode_inspect routine to return MTA_OK for every call (which should technically just let the message pass) it has the same behavior as my program. (Not all that suprising since mine is a derivative of said program)
That said, this now looks like a library issue. I'm using Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005) according to the SMTP prompt, and was wondering if perhaps I should apply:
http://sunsolve.sun.com/search/document.do?assetkey=1-21-118207-42-1&searchclause=6306404
The issue seems to be in the mtaDecodeMessage function, and occurs when the decode_inspect function is allowed to parse the message body, not just the message headers.
The machine is a Sun Ultra 4500 running Solaris 10. Here's the banner:
SunOS cookie 5.10 Generic_118822-23 sun4u sparc SUNW,Ultra-Enterprise
Has anyone else had similar problems using the MTA SDK? Is there anything I'm missing here (besides the above mentioned patch) that might fix this?