From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#15984: 24.3; Problem with combining characters in attachment filename Date: Thu, 28 Nov 2013 22:25:01 +0200 Message-ID: <83iovc8eaq.fsf@gnu.org> References: Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8BIT X-Trace: ger.gmane.org 1385670375 29174 80.91.229.3 (28 Nov 2013 20:26:15 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 28 Nov 2013 20:26:15 +0000 (UTC) Cc: 15984@debbugs.gnu.org To: nisse@lysator.liu.se (Niels =?UTF-8?Q?M=C3=B6ller?=) Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Nov 28 21:26:19 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Vm8AE-0002QV-M5 for geb-bug-gnu-emacs@m.gmane.org; Thu, 28 Nov 2013 21:26:18 +0100 Original-Received: from localhost ([::1]:43980 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Vm8AE-0002Qo-60 for geb-bug-gnu-emacs@m.gmane.org; Thu, 28 Nov 2013 15:26:18 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:40113) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Vm8A4-0002QZ-Sb for bug-gnu-emacs@gnu.org; Thu, 28 Nov 2013 15:26:14 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Vm89z-0002gI-1C for bug-gnu-emacs@gnu.org; Thu, 28 Nov 2013 15:26:08 -0500 Original-Received: from debbugs.gnu.org ([140.186.70.43]:35189) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Vm89y-0002gE-U5 for bug-gnu-emacs@gnu.org; Thu, 28 Nov 2013 15:26:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1Vm89y-0003FI-B9 for bug-gnu-emacs@gnu.org; Thu, 28 Nov 2013 15:26:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 28 Nov 2013 20:26:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 15984 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 15984-submit@debbugs.gnu.org id=B15984.138567032812429 (code B ref 15984); Thu, 28 Nov 2013 20:26:02 +0000 Original-Received: (at 15984) by debbugs.gnu.org; 28 Nov 2013 20:25:28 +0000 Original-Received: from localhost ([127.0.0.1]:49208 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Vm89P-0003EO-9S for submit@debbugs.gnu.org; Thu, 28 Nov 2013 15:25:27 -0500 Original-Received: from mtaout22.012.net.il ([80.179.55.172]:52605) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Vm89J-0003E5-HF for 15984@debbugs.gnu.org; Thu, 28 Nov 2013 15:25:23 -0500 Original-Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0MWZ00C00PTJEU00@a-mtaout22.012.net.il> for 15984@debbugs.gnu.org; Thu, 28 Nov 2013 22:25:15 +0200 (IST) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0MWZ00CP1Q215LA0@a-mtaout22.012.net.il>; Thu, 28 Nov 2013 22:25:13 +0200 (IST) In-reply-to: X-012-Sender: halo1@inter.net.il X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:81057 Archived-At: > From: nisse@lysator.liu.se (Niels Möller) > Date: Thu, 28 Nov 2013 09:08:54 +0100 > > I'm reading email with Gnus. I received an email with an attachment > containing the headers > > Content-Type: application/pdf; > name="Brev =?UTF-8?B?YWt0aWVhzIhnYXIgMTMxMTI3LnBkZg==?=" > Content-Transfer-Encoding: base64 > Content-Disposition: attachment; > filename*0*=UTF-8''%42%72%65%76%20%61%6B%74%69%65%61%CC%88%67%61%72%20%31; > filename*1*=%33%31%31%32%37%2E%70%64%66 > > Apparently sent by a Mac user, > > User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.1.1 > > The attachement was displayed in the *Article* buffer as > > [2. application/pdf; Brev aktiea?gar 131127.pdf]... > > I was running emacs-24.3 in a tty, in a latin-1 locale, on a sparc > Solaris system. (In a latin-1 tty, emacs ought to display "ä" instead of > "a?", but that's a less severe and possibly unrelated problem). If ä was supposed to be produced by character compositions, then Emacs cannot do that on a TTY, because compositions require drawing one glyph over the other (with certain offsets). If you expected Emacs to perform normalization in this case, then I don't think we do this automatically (or at all). > When I tried to save the attachment by pressing "o" on that button > (gnus-mime-save-part), emacs immediately crashed with a segmentation > violation signal. Since emacs very rarely crashes, I was a bit > surprised. I just restarted emacs and Gnus and tried again, and it > crashed again. So at least for me, the problem is reproducible. Can you send that message as a binary attachment? > And a crash triggered by untrusted data in a received email is always > scary. After fixing the bug, exploit possibilities ought to be analyzed. I suggest to try a recent development trunk, several similar crashes were fixed a few months ago. If that doesn't help, please reproduce the problem in a non-optimized non-stripped build, and show the variables from char_table_ref that are involved in the crash. (I'm guessing char_table_ref got a bogus character code.)