Erreur de traitement regex bloque sympa.pl (bug ?)

[Jacques Caruso <adresse@cachée>]

Bonjour,

tout d'abord, j'espère que ceci n'a pas déjà été rapporté. J'ai tenté
une recherche dans l'archive de cette ML sans trouver grand-chose. Je me
suis donc dit que ça valait la peine que je rapporte le problème. Si je
me suis trompé, heu... désolé :-/

Nous avons eu un problème ce matin : SyMPA (version 3.2.1) ne voulait
plus lancer sympa.pl, et aucun message d'erreur n'apparaissait. Après
avoir conséquemment lancé sympa.pl à la main avec l'option -d, on a pu
constater qu'il se bloquait sur un spam avec une erreur de traitement de
regex :

Nested quantifiers in regex; marked by <-- HERE in m/^\s** <-- HERE 
@crescotek.com\s*$/ at /usr/lib/sympa/bin/List.pm line 3037, <IN> line 156.

Après investigation, il s'avère que le message en question avait une
particularité bizarre : l'adresse de retour était <*@crescotek.com>.
J'ai donc remplacé le '*' par des caractères plus conformes, et sympa.pl
a accepté de redémarrer. J'en conclus que le '*' n'était pas échappé
avant que l'adresse ne soit traitée (enfin, un peu au pif, je manque de
temps pour chercher réellement). Pour information, voici le résultat de
'sympa.pl -d', et le message incriminé avec tous les en-têtes (désolé,
c'est un peu long du coup, mais ça devrait permettre de réproduire le
bug) :

---- BEGIN DEBUG OUTPUT ----
1055761791      Configuration file read
1055761791      List::probe_db()
1055761791      List::db_connect
1055761791      Connected to Database sympa
1055761791      List::_apply_defaults()
1055761791      Loading locale file cn-gb.cat version 2.8.1
1055761791      Loading locale file de.cat version 2.5.2
1055761791      Loading locale file cz.cat version 3.1b.12
1055761791      Loading locale file es.cat version 3.1.1
1055761791      Loading locale file fi.cat version 2.5.4
1055761791      Loading locale file fr.cat version 2.8.1
1055761791      Loading locale file hu.cat version 2.8.1
1055761791      Loading locale file it.cat version 2.5.4
1055761791      Loading locale file pl.cat version 2.8.1
1055761791      Loading locale file cn-big5.cat version 2.5
1055761791      Loading locale file us.cat version 2.8.1
1055761791      Sympa 3.2.1 Started
Sympa 3.2.1 Started
1055761791      Language::SetLang(fr)
1055761791      List::init_list_cache()
1055761791      List::new(xxxxxxx)
1055761791      List object xxxxxxx created
1055761791      List::load(xxxxxxx)
1055761791      List::_load_admin_file(xxxxxxx, config)
1055761791      _load_list_param('date_epoch','1017138862')
1055761791      _load_list_param('date','26 mar 2002 at 11:34:22')
1055761791      _load_list_param('email','adresse@cachée')
1055761791      _load_list_param('period','month')
1055761791      _load_list_param('access','owner')
1055761791      _load_list_param('unsubscribe','open_notify')
1055761791      List::_load_scenario_file(unsubscribe, open_notify, xxxxxxx)
1055761791      List::_load_scenario(unsubscribe,open_notify)
1055761791      _load_list_param('status','open')
1055761791      _load_list_param('date_epoch','1012984111')
1055761791      _load_list_param('date','06 Feb 2002 at 09:28:31')
1055761791      _load_list_param('email','adresse@cachée')
1055761791      _load_list_param('access','private')
1055761791      List::_load_scenario_file(access_web_archive, private, 
xxxxxxx)
1055761791      List::_load_scenario(access_web_archive,private)
1055761791      _load_list_param('subscribe','owner')
1055761791      List::_load_scenario_file(subscribe, owner, xxxxxxx)
1055761791      List::_load_scenario(subscribe,owner)
1055761791      _load_list_param('review','private')
1055761791      List::_load_scenario_file(review, private, xxxxxxx)
1055761791      List::_load_scenario(review,private)
1055761791      _load_list_param('footer_type','append')
1055761791      _load_list_param('serial','12')
1055761791      _load_list_param('host','list.monaco.net')
1055761791      _load_list_param('digest','5 20:56')
1055761791      _load_list_param('clean_delay_queuemod','15')
1055761791      _load_list_param('value','list')
1055761791      _load_list_param('apply','forced')
1055761791      
_load_list_param('reception','digest,mail,nomail,notice,summary')
1055761791      _load_list_param('topics','standard')
1055761791      _load_list_param('custom_subject','xxxxxxx')
1055761791      _load_list_param('subject','xxxxxxx')
1055761791      _load_list_param('gecos','Xxxxxxxx XXXXXXXX')
1055761791      _load_list_param('reception','mail')
1055761791      _load_list_param('email','adresse@cachée')
1055761791      _load_list_param('info','private')
1055761791      List::_load_scenario_file(info, private, xxxxxxx)
1055761791      List::_load_scenario(info,private)
1055761791      _load_list_param('reception','nomail')
1055761791      _load_list_param('profile','privileged')
1055761791      _load_list_param('email','adresse@cachée')
1055761791      _load_list_param('reception','mail')
1055761791      _load_list_param('profile','privileged')
1055761791      _load_list_param('email','adresse@cachée')
1055761791      _load_list_param('priority','HASH(0x878443c)')
1055761791      _load_list_param('visibility','default')
1055761791      List::_load_scenario_file(visibility, default, xxxxxxx)
1055761791      List::_load_scenario(visibility,default)
1055761791      _load_list_param('invite','default')
1055761791      List::_load_scenario_file(invite, default, xxxxxxx)
1055761791      List::_load_scenario(invite,default)
1055761791      _load_list_param('reception','mail')
1055761791      _load_list_param('visibility','noconceal')
1055761791      _load_list_param('lang','HASH(0x878304c)')
1055761791      _load_list_param('cookie','HASH(0x877f0fc)')
1055761791      _load_list_param('max_size','HASH(0x87830b8)')
1055761791      _load_list_param('warn_rate','HASH(0x877d9f0)')
1055761791      _load_list_param('halt_rate','HASH(0x877da74)')
1055761791      _load_list_param('send','default')
1055761791      List::_load_scenario_file(send, default, xxxxxxx)
1055761791      List::_load_scenario(send,default)
1055761791      _load_list_param('add','default')
1055761791      List::_load_scenario_file(add, default, xxxxxxx)
1055761791      List::_load_scenario(add,default)
1055761791      _load_list_param('ttl','3600')
1055761791      _load_list_param('remind_return_path','HASH(0x8784520)')
1055761791      _load_list_param('d_edit','default')
1055761791      List::_load_scenario_file(d_edit, default, xxxxxxx)
1055761791      List::_load_scenario(d_edit,default)
1055761791      _load_list_param('d_read','default')
1055761791      List::_load_scenario_file(d_read, default, xxxxxxx)
1055761791      List::_load_scenario(d_read,default)
1055761791      _load_list_param('remind','default')
1055761791      List::_load_scenario_file(remind, default, xxxxxxx)
1055761791      List::_load_scenario(remind,default)
1055761791      _load_list_param('user_data_source','database')
1055761791      _load_list_param('welcome_return_path','HASH(0x87871f0)')
1055761791      _load_list_param('del','default')
1055761791      List::_load_scenario_file(del, default, xxxxxxx)
1055761791      List::_load_scenario(del,default)
1055761791      _load_list_param('reply_to','sender')
1055761791      List::_load_stats_file(xxxxxxx/stats)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
Reaper unwaited pids :
Open = 0
1055761791      Processing /var/spool/sympa/msg/xxxxxxx.1055761583.3089 with 
priority 5
1055761791      DoFile(/var/spool/sympa/msg/xxxxxxx.1055761583.3089)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      DoMessage(xxxxxxx)
, MIME::Entity=HASH(0x8a1ef0c), msg from "Christopher" <*@crescotek.com>
, 6469, /var/spool/sympa/msg/xxxxxxx.1055761583.3089,not_crypted)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      Processing message for xxxxxxx with priority 5, 
<bz99634b2noyd3wm65$-$9j78@z3ukfy66uzg>

1055761791      tools::checkcommand(msg->head->get(subject): Beware of Scams 
ga
,*@crescotek.com)
1055761791      virus_infected (/var/spool/sympa/msg/xxxxxxx.1055761583.3089)
1055761791      List::get_action(send)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::verify(is_subscriber([listname],[sender])            )
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::is_user(*@crescotek.com)
1055761791      List::verify(is_editor([listname],[sender])                )
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::am_i(editor, *@crescotek.com)
1055761791      List::verify(is_owner([listname],[sender])                 )
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::new(xxxxxxx)
1055761791      List::load(xxxxxxx)
1055761791      List::am_i(owner, *@crescotek.com)
Nested quantifiers in regex; marked by <-- HERE in m/^\s** <-- HERE 
@crescotek.com\s*$/ at /usr/lib/sympa/bin/List.pm line 3037, <IN> line 156.
----- END DEBUG OUTPUT -----

---- BEGIN SPAM MESSAGE ----
X-Sympa-To: xxxxxxx
Return-Path: <*@crescotek.com>
Delivered-To: adresse@cachée
Received: from pcp04206310pcs.brick101.nj.comcast.net 
(pcp04206310pcs.brick101.nj.comcast.net [68.36.110.166])
        by perso2.monaco.net (Postfix) with SMTP id B6218320C5
        for <adresse@cachée>; Wed, 11 Jun 2003 11:27:39 +0200 (CEST)
Received: from h04l.zyv3sk.net [101.115.11.171] by 
pcp04206310pcs.brick101.nj.comcast.net id <8677696-89939>; Wed, 11 Jun 2003 
20:23:05 -0500
Message-ID: <bz99634b2noyd3wm65$-$9j78@z3ukfy66uzg>
From: "Christopher" <*@crescotek.com>
To: adresse@cachée
Subject: Beware of Scams ga
Date: Wed, 11 Jun 03 20:23:05 GMT
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="3..DD92AE3.80D4"
X-Priority: 3
X-MSMail-Priority: Normal

This is a multi-part message in MIME format.

--3..DD92AE3.80D4
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

[texte du spam omis]

--3..DD92AE3.80D4--
----- END SPAM MESSAGE -----

Encore une fois, désolé si ce n'est pas un bug, ou si j'ai juste mal lu
la doc. Ça m'a juste paru suffisamment problématique pour être
signalé...

+++
-- 
[ Jacques Caruso <adresse@cachée>                  Développeur PHP ]
[ Monaco Internet                           http://monaco-internet.mc/ ]
[ Tél : (+377) 93 10 00 43                        Clé PGP : 0x41F5C63D ]
[ * Quand j'écoute Wagner, j'ai envie d'envahir la Pologne - W Allen * ]