Bug 121850

Summary:	[PATCH] infinite loop within tls_read
Product:	Red Hat Enterprise Linux 4	Reporter:	Michael Redinger <michael.redinger>
Component:	sendmail	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.0	CC:	ddawson
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	RHSA-2007-0252	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-05-01 17:11:13 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Michael Redinger 2004-04-28 17:09:00 UTC

version:
sendmail-8.12.10-1

There is a bug in sendmail that makes it enter an infinite loop,
writing
STARTTLS: read error=generic SSL error
to syslog until your filesystem is full ...

For a detailed description, please see:
http://www.mailarchive.ca/lists/comp.mail.sendmail//2003-02/0293.html

To fix this, simply add -D _FFR_DEAL_WITH_ERROR_SSL to
sendmail-8.12.2-redhat.patch . The result looks like this:

+define(`confENVDEF', `$(RPM_OPT_FLAGS) -I/usr/include/db4
-I/usr/kerberos/include -Wall -DXDEBUG=0 -DTCPWRAPPERS -DSASL=2
-DSTARTTLS -DMILTER -DNETINET6 -DHES_GETMAILHOST
-DUSE_VENDOR_CF_PATH=1 -D_FFR_WORKAROUND_BROKEN_NAMESERVERS
-D_FFR_SMTP_SSL -D_FFR_MILTER_ROOT_UNSAFE -D_FFR_UNSAFE_SASL
-D_FFR_DEAL_WITH_ERROR_SSL')


Greetings,
Michael

Comment 1 Thomas Woerner 2004-06-15 14:56:11 UTC

Can you please test this with the latest update for RHEL3?

Comment 2 Ken Snider 2004-07-13 15:07:22 UTC

I haven't yet figured out how to reproduce this bug, but I *do* see it
on several servers. I'm trying to see if upgrading the the U2 sendmail
RPM corrects the issue.

Comment 3 Ken A. 2005-10-24 20:12:42 UTC

seeing it here too... millions of lines of 
Oct 24 10:54:04 mail sendmail[6797]: STARTTLS: read error=generic SSL error (0)
Oct 24 10:54:04 mail sendmail[519]: STARTTLS: read error=generic SSL error (0)
...until the /var/ partition fills up.
on FC3 - sendmail 8.13.1
Please release a fix for FC3!

Comment 4 Michael Redinger 2006-03-09 11:03:23 UTC

This bug still exists in RHEL 4.

To fix it, add _FFR_DEAL_WITH_ERROR_SSL to confENVDEF in the spec file (there is
no need to change/add a patch, as describe above ...).

The bug is still present because Red Hat uses 8.13.1. Since 8.13.3,
_FFR_DEAL_WITH_ERROR_SSL is defined per default.

Comment 5 Michael Redinger 2006-03-09 11:06:56 UTC

See also:
http://groups.google.at/group/comp.mail.sendmail/browse_thread/thread/9ca0a49b001162ce/5ddd2a8f70de5177?lnk=st

Comment 6 RHEL Program Management 2006-08-18 17:59:07 UTC

This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
release.

Comment 11 Red Hat Bugzilla 2007-05-01 17:11:13 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2007-0252.html