[Mimedefang] Bug in md_syslog

[Steffen Kaiser]

Hello,

recently, after I installed MIMEDefang v2.24 non-Beta, I found these log
entries:

Oct 29 05:00:42 ux-2s02 mimedefang-multiplexor: [ID 980602 mail.info] Slave 9 stderr: Invalid conversion in sprintf: "%\306" at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris-multi/Unix/Syslog.pm line 56.
Oct 29 21:52:39 ux-2s02 mimedefang-multiplexor: [ID 980602 mail.info] Slave 4 stderr: Invalid conversion in sprintf: "%." at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris-multi/Unix/Syslog.pm line 56.
Oct 29 21:52:47 ux-2s02 mimedefang-multiplexor: [ID 980602 mail.info] Slave 4 stderr: Invalid conversion in sprintf: "%." at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris-multi/Unix/Syslog.pm line 56.
Oct 30 08:15:53 ux-2s02 mimedefang-multiplexor: [ID 980602 mail.info] Slave 11 stderr: Invalid conversion in sprintf: "%M" at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris-multi/Unix/Syslog.pm line 56.
Oct 30 08:15:56 ux-2s02 mimedefang-multiplexor: [ID 980602 mail.info] Slave 11 stderr: Invalid conversion in sprintf: "%M" at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris-multi/Unix/Syslog.pm line 56.

perldoc explains "syslog" as follows:

syslog $priority, $format, @formatargs;

mimedefang.pl implements md_syslog as follows:

sub md_syslog ($$) {
    my($facility, $msg) = @_;

    if ($Features{"Unix::Syslog"}) {
[cut]
        syslog($num_fac, $msg);
    } else {
        syslog($facility, $msg);
    }
}

So md_syslog passes the message ($msg) forth to syslog's format string.
So if the Subject line or the Email address includes a '%' sign, the bug
is triggered.

Bye,

-- 

Steffen Kaiser