Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 05:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

SMTP: No state update for bad BDAT commands

Browse source 
OSS-Fuzz found that providing an invalid BDAT line would tickle an
assert in UpdateState(). The BDAT state was never initialized, but
within UpdateState() that was expected.

This also removes the AnalyzerViolation() call for bad BDAT commands
and instead raises a weird. The SMTP analyzer is very lax and not triggering
the violation allows to parse the server's response to such an invalid
command.

PCAP files produced by a custom Python SMTP client against Postfix.
This commit is contained in:
Arne Welzel 2024-01-15 16:44:49 +01:00
parent 5ad11e00e3
commit ae2a5c83a4
7 changed files with 134 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

58
testing/btest/Baseline/scripts.base.protocols.smtp.bdat-cmd-invalid/out Normal file
View file

@ -0,0 +1,58 @@
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
smtp_reply, CHhAvVGS1DHFjwGM9, F, 220, >, example.com ESMTP Postfix (Debian/GNU)
smtp_request, CHhAvVGS1DHFjwGM9, T, EHLO, localhost
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, example.com
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, PIPELINING
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, SIZE 10240000
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, ETRN
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, STARTTLS
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, ENHANCEDSTATUSCODES
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, 8BITMIME
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, DSN
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, SMTPUTF8
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, EHLO, CHUNKING
smtp_request, CHhAvVGS1DHFjwGM9, T, MAIL, FROM:<zeek@localhost>
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, MAIL, 2.1.0 Ok
smtp_request, CHhAvVGS1DHFjwGM9, T, RCPT, TO:<root@localhost>
smtp_reply, CHhAvVGS1DHFjwGM9, F, 250, RCPT, 2.1.5 Ok
smtp_request, CHhAvVGS1DHFjwGM9, T, BDAT,
smtp_reply, CHhAvVGS1DHFjwGM9, F, 521, BDAT, 5.5.4 Syntax: BDAT count [LAST]
smtp_request, CHhAvVGS1DHFjwGM9, T, QUIT,
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 220, >, example.com ESMTP Postfix (Debian/GNU)
smtp_request, ClEkJM2Vm5giqnMf4h, T, EHLO, localhost
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, example.com
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, PIPELINING
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, SIZE 10240000
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, ETRN
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, STARTTLS
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, ENHANCEDSTATUSCODES
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, 8BITMIME
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, DSN
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, SMTPUTF8
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, EHLO, CHUNKING
smtp_request, ClEkJM2Vm5giqnMf4h, T, MAIL, FROM:<zeek@localhost>
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, MAIL, 2.1.0 Ok
smtp_request, ClEkJM2Vm5giqnMf4h, T, RCPT, TO:<root@localhost>
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 250, RCPT, 2.1.5 Ok
smtp_request, ClEkJM2Vm5giqnMf4h, T, BDAT, 1234 SCRAMBLE
smtp_reply, ClEkJM2Vm5giqnMf4h, F, 521, BDAT, 5.5.4 Syntax: BDAT count [LAST]
smtp_request, ClEkJM2Vm5giqnMf4h, T, QUIT,
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 220, >, example.com ESMTP Postfix (Debian/GNU)
smtp_request, C4J4Th3PJpwUYZZ6gc, T, EHLO, localhost
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, example.com
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, PIPELINING
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, SIZE 10240000
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, ETRN
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, STARTTLS
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, ENHANCEDSTATUSCODES
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, 8BITMIME
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, DSN
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, SMTPUTF8
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, EHLO, CHUNKING
smtp_request, C4J4Th3PJpwUYZZ6gc, T, MAIL, FROM:<zeek@localhost>
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, MAIL, 2.1.0 Ok
smtp_request, C4J4Th3PJpwUYZZ6gc, T, RCPT, TO:<root@localhost>
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 250, RCPT, 2.1.5 Ok
smtp_request, C4J4Th3PJpwUYZZ6gc, T, BDAT, SCRAMBLE
smtp_reply, C4J4Th3PJpwUYZZ6gc, F, 521, BDAT, 5.5.4 Syntax: BDAT count [LAST]
smtp_request, C4J4Th3PJpwUYZZ6gc, T, QUIT,