james-mime4j-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "mike bell (JIRA)" <mime4j-...@james.apache.org>
Subject [jira] Created: (MIME4J-140) MIME4J-57 is not practical in its limits and incorrect in its RFC interpretation
Date Sun, 15 Nov 2009 07:58:39 GMT
MIME4J-57 is not practical in its limits and incorrect in its RFC interpretation

                 Key: MIME4J-140
                 URL: https://issues.apache.org/jira/browse/MIME4J-140
             Project: JAMES Mime4j
          Issue Type: Bug
    Affects Versions: 0.6
            Reporter: mike bell

I have begun playing with Mime4j for potential use in a software project. Very quickly I found
a simple email (Which i can attach) which has about 30 TO addresses. The default was to throw
an exception

Looking at MIME4J-57 the author has misunderstood the SMTP RFC 2821. Yes you are limited to
998 octets PER LINE, but you may FOLD as many 998 octet lines as you wish. Technically it's
100% legal to have a 50 megabyte header value, as long as it is folded. (per 76 or 998 rules).

I think the limit chosen by default of 1000 is absurdly low - this should be 100000 minimum
or perhaps even unlimited by default. There is something to be said for a sanity check option,
for sure - but not one that is triggered so easily.

I can also open somewhat related JIRAS if people find them of merit:

1. Documentation - defaults should be clearly stated in MimeEntityConfig javadoc. They are
2. Bug - The javadocs for MimeEntityConfig claim mc.setMaxHeaderCount(-1); would defeat; this
check. It does not (I worked around with Integer.MaxValue)
3. Design Question: Should the MimeTokenStream not have a public constructor that allows MimeEntityConfig
to be fed. As it was I had to create my own subclass to access the protected constructor -
is there a reason for this?


Example header that blew stuff up (and I think we've all seen far far worse!) - The To line
triggers this

Return-Path: <tomxypdq@hotmail.com>
Received: from c.mx.sonic.net (c.mx.sonic.net [])
	by eth0.a.lds.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id mBT21U5h027864;
	Sun, 28 Dec 2008 18:01:30 -0800
Received: from bay0-omc2-s13.bay0.hotmail.com (bay0-omc2-s13.bay0.hotmail.com [])
	by c.mx.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id mBT21QuA026548;
	Sun, 28 Dec 2008 18:01:30 -0800
Received: from BAY117-W11 ([]) by bay0-omc2-s13.bay0.hotmail.com with Microsoft
	 Sun, 28 Dec 2008 18:01:26 -0800
Message-ID: <BAY117-W1177D87B46BEFE5606716BDDE60@phx.gbl>
Content-Type: multipart/mixed;
X-Originating-IP: []
From: Tommy Clark <tomxypdq@hotmail.com>
To: <alayne.newton@thomson.com>,
        Alexandra Droman
        Alexis Steinkamp <lexilooo@hotmail.com>, <asteinkamp@ameritech.net>,
        <attame@msn.com>, Ben Greenberg
        blythe gross <muppetgirl1969@yahoo.com>, <brenden@mediamystic.com>,
        <cliverping@hotmail.com>, Dae-Jin Kim
        Doug Arthur <dougside@yahoo.com>,
        Dox Doxiadis
	<evdoxios.doxiadis@gmail.com>, <doxiadis@princeton.edu>,
        Haidde Sprague
        James Lee <jcl0072@hotmail.com>, Jeff Dorman
        <jeffejeff@gmail.com>, "Jeff Lim (E-mail)"
        Jeff Moshman <jmosesian@sonic.net>, Karen Wolfe
        <keirabby@charter.net>, keirabby
        <keirmo@yahoo.com>, Kerry Levenberg
        Kim-Chi Steger <kcsteger@aol.com>, <lornap78@hotmail.com>,
        <mbell90@sonic.net>, mike bell <mjb@gwava.com>, <myra13@aol.com>,
        Natalie Stange <nstange@nyc.rr.com>,
        karen wolfe
	<ngocbao99@yahoo.com>, <polykor@chol.com>,
        Rob Cliver
	<cliver@fulbrightweb.org>, Sharon Lee <weronron@yahoo.com>,
        the Clarks
	<bosudary@comcast.net>, Ward Breeze <wbreeze@gunder.com>,
Subject: N More THANKS
Date: Sun, 28 Dec 2008 18:01:25 -0800
Importance: Normal
In-Reply-To: <BAY117-W268E2179DDEE877110AF11DDE60@phx.gbl>
References: <c46c51bb0812281737i256ae8depebb851f79b54c326@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 29 Dec 2008 02:01:26.0088 (UTC) FILETIME=[5B42CC80:01C96959]
X-Sonic-SB-IP-RBLs: IP RBLs sorbs-spam.

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message