Bug 121850 - [PATCH] infinite loop within tls_read
[PATCH] infinite loop within tls_read
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: sendmail (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Thomas Woerner
Depends On:
  Show dependency treegraph
Reported: 2004-04-28 13:09 EDT by Michael Redinger
Modified: 2007-11-30 17:07 EST (History)
1 user (show)

See Also:
Fixed In Version: RHSA-2007-0252
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-05-01 13:11:13 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Michael Redinger 2004-04-28 13:09:00 EDT

There is a bug in sendmail that makes it enter an infinite loop,
STARTTLS: read error=generic SSL error
to syslog until your filesystem is full ...

For a detailed description, please see:

To fix this, simply add -D _FFR_DEAL_WITH_ERROR_SSL to
sendmail-8.12.2-redhat.patch . The result looks like this:

+define(`confENVDEF', `$(RPM_OPT_FLAGS) -I/usr/include/db4
-I/usr/kerberos/include -Wall -DXDEBUG=0 -DTCPWRAPPERS -DSASL=2

Comment 1 Thomas Woerner 2004-06-15 10:56:11 EDT
Can you please test this with the latest update for RHEL3?
Comment 2 Ken Snider 2004-07-13 11:07:22 EDT
I haven't yet figured out how to reproduce this bug, but I *do* see it
on several servers. I'm trying to see if upgrading the the U2 sendmail
RPM corrects the issue.
Comment 3 Ken A. 2005-10-24 16:12:42 EDT
seeing it here too... millions of lines of 
Oct 24 10:54:04 mail sendmail[6797]: STARTTLS: read error=generic SSL error (0)
Oct 24 10:54:04 mail sendmail[519]: STARTTLS: read error=generic SSL error (0)
...until the /var/ partition fills up.
on FC3 - sendmail 8.13.1
Please release a fix for FC3!
Comment 4 Michael Redinger 2006-03-09 06:03:23 EST
This bug still exists in RHEL 4.

To fix it, add _FFR_DEAL_WITH_ERROR_SSL to confENVDEF in the spec file (there is
no need to change/add a patch, as describe above ...).

The bug is still present because Red Hat uses 8.13.1. Since 8.13.3,
_FFR_DEAL_WITH_ERROR_SSL is defined per default.
Comment 6 RHEL Product and Program Management 2006-08-18 13:59:07 EDT
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
Comment 11 Red Hat Bugzilla 2007-05-01 13:11:13 EDT
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.


Note You need to log in before you can comment on or make changes to this bug.