postfix-2.2.10-RC2

diff --git a/postfix/HISTORY b/postfix/HISTORY
index d413a089b6111c45fc4ad3ad2694dee7938af042..6515148ae5771e225a4630d854b4405ac1fd80f2 100644 (file)
--- a/postfix/HISTORY
+++ b/postfix/HISTORY
@@ -10881,7 +10881,19 @@ Apologies for any names omitted.
        handling, is too much change for a stable release. File:
        sendmail/sendmail.c.
 
+20060315
+
        Workaround: the PCRE library reports an inappropriate error
        code (invalid substring) when $number refers to a valid ()
        expression that matches the null string. This caused fatal
        run-time errors.  File: dict_pcre.c.
+
+20060324
+
+       Bugfix: mis-placed parenthesis in SMTP before-filter error
+       test. A filter timeout was mis-reported as lost connection.
+       Found in code review.  File: smtpd/smtpd_proxy.c.
+
+20060403
+       Bugfix: the pipe-to-command error message was lost when the
+       command could not be executed. File: global/pipe_command.c.

diff --git a/postfix/html/postconf.5.html b/postfix/html/postconf.5.html
index 208c1f71040a603ea846ea224945ec70568c4b09..281407a879390d37ad3c8c2c536e9848bd048828 100644 (file)
--- a/postfix/html/postconf.5.html
+++ b/postfix/html/postconf.5.html
@@ -8226,17 +8226,17 @@ of forged mail from worms or viruses.  </p>
 <ul>
 
 <li> The sender domain matches $<a href="postconf.5.html#mydestination">mydestination</a>, $<a href="postconf.5.html#inet_interfaces">inet_interfaces</a> or
-$<a href="postconf.5.html#proxy_interfaces">proxy_interfaces</a>, but the recipient is not listed in
+$<a href="postconf.5.html#proxy_interfaces">proxy_interfaces</a>, but the sender is not listed in
 $<a href="postconf.5.html#local_recipient_maps">local_recipient_maps</a>, and $<a href="postconf.5.html#local_recipient_maps">local_recipient_maps</a> is not null.
 
-<li> The sender domain matches $<a href="postconf.5.html#virtual_alias_domains">virtual_alias_domains</a> but the recipient
+<li> The sender domain matches $<a href="postconf.5.html#virtual_alias_domains">virtual_alias_domains</a> but the sender
 is not listed in $<a href="postconf.5.html#virtual_alias_maps">virtual_alias_maps</a>.
 
 <li> The sender domain matches $<a href="postconf.5.html#virtual_mailbox_domains">virtual_mailbox_domains</a> but the
-recipient is not listed in $<a href="postconf.5.html#virtual_mailbox_maps">virtual_mailbox_maps</a>, and $<a href="postconf.5.html#virtual_mailbox_maps">virtual_mailbox_maps</a>
+sender is not listed in $<a href="postconf.5.html#virtual_mailbox_maps">virtual_mailbox_maps</a>, and $<a href="postconf.5.html#virtual_mailbox_maps">virtual_mailbox_maps</a>
 is not null.
 
-<li> The sender domain matches $<a href="postconf.5.html#relay_domains">relay_domains</a> but the recipient is
+<li> The sender domain matches $<a href="postconf.5.html#relay_domains">relay_domains</a> but the sender is
 not listed in $<a href="postconf.5.html#relay_recipient_maps">relay_recipient_maps</a>, and $<a href="postconf.5.html#relay_recipient_maps">relay_recipient_maps</a> is
 not null.
 

diff --git a/postfix/man/man5/postconf.5 b/postfix/man/man5/postconf.5
index bd2f315f062c98a6d58caca4b1d9bcbd8c1af815..6e3f2832eead3cebb9405fb6be51a0ed45e74d91 100644 (file)
--- a/postfix/man/man5/postconf.5
+++ b/postfix/man/man5/postconf.5
@@ -4705,17 +4705,17 @@ access restriction is specified. This can slow down an explosion
 of forged mail from worms or viruses.
 .IP \(bu
 The sender domain matches $mydestination, $inet_interfaces or
-$proxy_interfaces, but the recipient is not listed in
+$proxy_interfaces, but the sender is not listed in
 $local_recipient_maps, and $local_recipient_maps is not null.
 .IP \(bu
-The sender domain matches $virtual_alias_domains but the recipient
+The sender domain matches $virtual_alias_domains but the sender
 is not listed in $virtual_alias_maps.
 .IP \(bu
 The sender domain matches $virtual_mailbox_domains but the
-recipient is not listed in $virtual_mailbox_maps, and $virtual_mailbox_maps
+sender is not listed in $virtual_mailbox_maps, and $virtual_mailbox_maps
 is not null.
 .IP \(bu
-The sender domain matches $relay_domains but the recipient is
+The sender domain matches $relay_domains but the sender is
 not listed in $relay_recipient_maps, and $relay_recipient_maps is
 not null.
 .PP

diff --git a/postfix/proto/postconf.proto b/postfix/proto/postconf.proto
index 11b1fc17d30324e8116a1202664e5dfc4960139e..c758fee800634a268c9ec3db557051681eae025c 100644 (file)
--- a/postfix/proto/postconf.proto
+++ b/postfix/proto/postconf.proto
@@ -7172,17 +7172,17 @@ of forged mail from worms or viruses.  </p>
 <ul>
 
 <li> The sender domain matches $mydestination, $inet_interfaces or
-$proxy_interfaces, but the recipient is not listed in
+$proxy_interfaces, but the sender is not listed in
 $local_recipient_maps, and $local_recipient_maps is not null.
 
-<li> The sender domain matches $virtual_alias_domains but the recipient
+<li> The sender domain matches $virtual_alias_domains but the sender
 is not listed in $virtual_alias_maps.
 
 <li> The sender domain matches $virtual_mailbox_domains but the
-recipient is not listed in $virtual_mailbox_maps, and $virtual_mailbox_maps
+sender is not listed in $virtual_mailbox_maps, and $virtual_mailbox_maps
 is not null.
 
-<li> The sender domain matches $relay_domains but the recipient is
+<li> The sender domain matches $relay_domains but the sender is
 not listed in $relay_recipient_maps, and $relay_recipient_maps is
 not null.
 

diff --git a/postfix/src/global/mail_version.h b/postfix/src/global/mail_version.h
index 02cebc7fd532c7804e24ff65e7e0c5d394634aec..722d611992840393109874c098cae501371fbbdf 100644 (file)
--- a/postfix/src/global/mail_version.h
+++ b/postfix/src/global/mail_version.h
@@ -20,8 +20,8 @@
   * Patches change the patchlevel and the release date. Snapshots change the
   * release date only.
   */
-#define MAIL_RELEASE_DATE      "20060315"
-#define MAIL_VERSION_NUMBER    "2.2.10-RC1"
+#define MAIL_RELEASE_DATE      "20060403"
+#define MAIL_VERSION_NUMBER    "2.2.10-RC2"
 
 #define VAR_MAIL_VERSION       "mail_version"
 #ifdef SNAPSHOT

diff --git a/postfix/src/global/pipe_command.c b/postfix/src/global/pipe_command.c
index e091b6e77af552de1fce802c9680acb95b201785..39b707312314fa8e0500c99c53d1ad1389d7e32b 100644 (file)
--- a/postfix/src/global/pipe_command.c
+++ b/postfix/src/global/pipe_command.c
@@ -131,6 +131,7 @@
 
 #include <msg.h>
 #include <vstream.h>
+#include <msg_vstream.h>
 #include <vstring.h>
 #include <stringops.h>
 #include <iostuff.h>
@@ -345,7 +346,7 @@ static int pipe_command_wait_or_kill(pid_t pid, WAIT_STATUS_T *statusp, int sig,
 
 int     pipe_command(VSTREAM *src, VSTRING *why,...)
 {
-    char   *myname = "pipe_comand";
+    char   *myname = "pipe_command";
     va_list ap;
     VSTREAM *cmd_in_stream;
     VSTREAM *cmd_out_stream;
@@ -421,6 +422,7 @@ int     pipe_command(VSTREAM *src, VSTRING *why,...)
         * parent can kill not just the child but also its offspring.
         */
     case 0:
+       (void) msg_cleanup((MSG_CLEANUP_FN) 0);
        set_ugid(args.uid, args.gid);
        if (setsid() < 0)
            msg_warn("setsid failed: %m");
@@ -462,8 +464,16 @@ int     pipe_command(VSTREAM *src, VSTRING *why,...)
 
        /*
         * Process plumbing. If possible, avoid running a shell.
+        * 
+        * As a safety for buggy libraries, we close the syslog socket.
+        * Otherwise we could leak a file descriptor that was created by a
+        * privileged process.
+        * 
+        * XXX To avoid losing fatal error messages we open a VSTREAM and
+        * capture the output in the parent process.
         */
        closelog();
+       msg_vstream_init(var_procname, VSTREAM_ERR);
        if (args.argv) {
            execvp(args.argv[0], args.argv);
            msg_fatal("%s: execvp %s: %m", myname, args.argv[0]);

diff --git a/postfix/src/smtpd/smtpd_proxy.c b/postfix/src/smtpd/smtpd_proxy.c
index 861f72d29a129f32608fcec085d46a8cacd530b0..4e17cf07119c3317993a8d84a68fce28db1ec53c 100644 (file)
--- a/postfix/src/smtpd/smtpd_proxy.c
+++ b/postfix/src/smtpd/smtpd_proxy.c
@@ -416,7 +416,7 @@ int     smtpd_proxy_cmd(SMTPD_STATE *state, int expect, const char *fmt,...)
     if (vstream_ftimeout(state->proxy)
        || vstream_ferror(state->proxy)
        || vstream_feof(state->proxy)
-       || ((err = vstream_setjmp(state->proxy) != 0)
+       || ((err = vstream_setjmp(state->proxy)) != 0
            && smtpd_proxy_rdwr_error(state->proxy, err))) {
        state->error_mask |= MAIL_ERROR_SOFTWARE;
        state->err |= CLEANUP_STAT_PROXY;