--- Begin Message ---
|
Subject: |
Bug#205828: mailutils-pop3d: UIDL don't persist across sessions if QUIT is not issued (violates RFC !) |
|
Date: |
Sun, 17 Aug 2003 00:53:32 +0200 |
Package: mailutils-pop3d
Version: 20030809-2
Severity: important
The package mailutils-pop3d suffers from a bug in its UIDL management,
as evidenced by the test session below : the retrieved UIDL aren't kept
between sessions if the QUIT command is not issued (/e.g./ if the mail
client crashed in the middle of the session). This violates RFC 1939,
§ 7, which explicitly states :
« The unique-id of a message is an arbitrary server-determined
string [...] which persists across sessions. This persistence
is required *even if a session ends without entering the UPDATE
state* » (emphasis mine)
Since this bug can potentially cause misbehaviours (such as downloading
some messages twice) in some mail clients, I'm setting the severity as
« important ». If this is an upstream bug (which it seems to be. I
didn't check the source package, though), please tag this report
accordingly, and forward it to the upstream authors. Thanks.
(test session follows)
address@hidden|ttyp9:~$ telnet localhost pop3
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK POP3 Ready <address@hidden>
USER wsapplegate
+OK
PASS *******
+OK opened mailbox for wsapplegate
LIST
+OK
1 647
.
UIDL 1
+OK 1 6cf79f0fc273a6901c5fba5179b052c3.1061072593.1 <---- We get a UIDL...
^]
telnet> quit <---- And then, we close the session abruptly.
Connection closed.
address@hidden|ttyp9:~$ telnet localhost pop3
[SNIP]
+OK opened mailbox for wsapplegate
UIDL 1
+OK 1 6cf79f0fc273a6901c5fba5179b052c3.1061072609.1 <---- Surprise ! The UIDL
has changed !
QUIT <--- We enter the UPDATE state...
+OK
Connection closed by foreign host.
address@hidden|ttyp9:~$ telnet localhost pop3
[SNIP]
+OK opened mailbox for wsapplegate
UIDL 1
+OK 1 6cf79f0fc273a6901c5fba5179b052c3.1061072609.1 <---- And this time, the
UIDL stays the same
QUIT
+OK
Connection closed by foreign host.
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux betelgeuse 2.4.20-wolk4.4s #1 dim aoû 3 22:23:45 CEST 2003 i686
Locale: address@hidden, address@hidden (ignored: LC_ALL set to address@hidden)
Versions of packages mailutils-pop3d depends on:
ii libc6 2.3.2-2 GNU C Library: Shared libraries an
ii libcomerr2 1.34+1.35-WIP-2003.08.01-1 The Common Error Description libra
ii libgcrypt1 1.1.12-3 LGPL Crypto library - runtime libr
ii libgdbm3 1.8.3-1 GNU dbm database routines (runtime
ii libgnutls7 0.8.9-2 GNU TLS library - runtime library
ii libgsasl1 0.0.6-1 GNU SASL library
ii libidn9 0.1.14-2 GNU libidn library, implementation
ii libkrb53 1.3-2 MIT Kerberos runtime libraries
ii libmailutils0 20030809-2 GNU Mail abstraction library
ii libmysqlclien 3.23.56-2 LGPL-licensed client library for M
ii libpam0g 0.76-13 Pluggable Authentication Modules l
ii libtasn1-0 0.1.2-1 Manage ASN.1 structures (runtime)
ii netbase 4.10 Basic TCP/IP networking system
ii zlib1g 1:1.1.4-14 compression library - runtime
-- no debconf information
--- End Message ---
pgpoAOcX5IeT9.pgp