occasional corruption of signed messages

Bug #383784 reported by Robert Collins
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
GNU Mailman
Triaged
Undecided
Unassigned
Launchpad itself
Triaged
Low
Unassigned

Bug Description

I have a mailing list at https://launchpad.net/~subunit-dev. Sometimes when I post
there, with my normal gpg-signed mails, launchpad alters my mail
altering the content of my posts. This is bad because it means everyone
reading my email cannot be sure I sent the mail.

It doesn't happen every time. I'm trying to pin down the circumstances that cause it. I'll attach some mails to this bug shortly.

summary: - MITM attack by lp on mailing list posts
+ occasional corruption of signed messages
description: updated
Revision history for this message
Robert Collins (lifeless) wrote :

This mail got corrupted by the list. The list archives have it as https://lists.launchpad.net/subunit-dev/msg00008.html.

Revision history for this message
Robert Collins (lifeless) wrote :

This is the copy I received back from the list.

Revision history for this message
mouahed2010 (mouahed-elnahali) wrote : Re: [Bug 383784] [NEW] MITM attack by lp on mailing list posts

Soory you are at the wrong email and person Idon't why I'm not a
professionnel in fixing and reapirind Bugs in Ubuntu I wish you find a
solution good luck.

Revision history for this message
mouahed2010 (mouahed-elnahali) wrote : Re: [Bug 383784] Re: occasional corruption of signed messages

Soory you are at the wrong email and person Idon't why I'm not a
professionnel in fixing and reapirind Bugs in Ubuntu I wish you find a
solution good luck.

affects: launchpad → launchpad-registry
tags: added: email mailing-lists
Revision history for this message
Curtis Hovey (sinzui) wrote :

Barry. Can you triage this? what will it take to fix if it is a problem?

Changed in launchpad-registry:
assignee: nobody → Barry Warsaw (barry)
milestone: none → 2.2.6
Revision history for this message
Barry Warsaw (barry) wrote :

This will take some investigation and analysis of the good and corrupt messages, and an analysis of the paths this message may have taken through the mailing list. A few hours to determine the cause. I can't estimate what it would take to fix. It could be an upstream bug.

Revision history for this message
Curtis Hovey (sinzui) wrote :

Barry, attached is a unified diff between the good and bad messages.

Curtis Hovey (sinzui)
Changed in launchpad-registry:
milestone: 2.2.6 → none
Revision history for this message
Curtis Hovey (sinzui) wrote :

Hi Barry, Robert.

We don't seem to have made any progress in triaging this bug. I feel that corrupting signed messages warrant a high priority for fixing, but we do not have enough information to start coding. Was my diff helpful? Are there any new ideas about the cause of this? client, relay path, content that causes a reflow of text?

Changed in launchpad-registry:
status: New → Incomplete
Revision history for this message
Robert Collins (lifeless) wrote :

On Sat, 2009-07-04 at 15:11 +0000, Curtis Hovey wrote:
> Hi Barry, Robert.
>
> We don't seem to have made any progress in triaging this bug. I feel
> that corrupting signed messages warrant a high priority for fixing, but
> we do not have enough information to start coding. Was my diff helpful?
> Are there any new ideas about the cause of this? client, relay path,
> content that causes a reflow of text?

I haven't looked at the diff; however as its is reproducible for me,
perhaps something useful you could do is to reproduce it yourself:
send a signed mail to a lp list. Check it validates (it should). Forward
the mail like I did, signing the forward too. Check it fails to
validate.

That would rule out most of my mail-path.

-Rob

Revision history for this message
Barry Warsaw (barry) wrote :

I've verified this using the recipe you provided in your previous comment. I've also verified this using a stock Mailman 2.1.9 installation, so I believe it is a bug in Mailman. Launchpad uses the latest stable MM release (2.1.12) so I will try updating my test instance and see if the bug still exists, though I suspect it will.

There's definitely something client-dependent here. First, the forward should be as an attachment, however Claws (Linux) and Mail.app (OS X) seem to handle attachments differently because while they both fail, they fail in different ways. The Claws failure is closer to what I think you might see. I think Mailman is messing up the MIME structure of the message, and possibly breaking headers in the wrong place.

Launchpad's implementation of mailing lists isn't to blame here.

Changed in launchpad-registry:
status: Incomplete → Triaged
Changed in mailman:
status: New → Triaged
Curtis Hovey (sinzui)
Changed in launchpad-registry:
importance: Undecided → Low
Curtis Hovey (sinzui)
Changed in launchpad-registry:
assignee: Barry Warsaw (barry) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.