Arne Welzel ae2a5c83a4 SMTP: No state update for bad BDAT commands ...

OSS-Fuzz found that providing an invalid BDAT line would tickle an
assert in UpdateState(). The BDAT state was never initialized, but
within UpdateState() that was expected.

This also removes the AnalyzerViolation() call for bad BDAT commands
and instead raises a weird. The SMTP analyzer is very lax and not triggering
the violation allows to parse the server's response to such an invalid
command.

PCAP files produced by a custom Python SMTP client against Postfix.

2024-01-15 18:25:41 +01:00

7.7 KiB

Raw Permalink History

View raw