Closed Bug 1664913 Opened 4 years ago Closed 4 years ago

PGP encrypted emails crash Thunderbird [@ mime_LineBuffer]

Categories

(Thunderbird :: Security, defect)

Product:
Thunderbird
Component:
Security
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1665475

People

(Reporter: f.fainelli, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0

Steps to reproduce:

Opening PGP encrypted emails for reading.

Actual results:

Thunderbird crashes immediately.

Expected results:

The email should be decrypted.

Due to the email contents, I cannot share them but I am suspecting that these emails are encrypted via Symantec Encryption Desktop (SED) which is commonly deployed in my work environment.

It looks like emails encrypted by OpenPGP via Apple mail are also showing the same issues.

We got a recent report in bug 1663400 about problems with SED, but no crash was reported yet.

On which operating system does Thunderbird crash for you?
You are running 32bit or 64bit executable?

Do you get a crash ID in your profile folder, it would enable us to look at details.

Bug 1663400 has instructions for sending a test message. Could you please import those keys, and then compose an encrypted email, that is encrypted both to your own key and to one of the example keys from bug 1663400?

Please send the test message to the mentioned address, and let us know here after you have sent it.

(In reply to Kai Engert (:KaiE:) from comment #3)

We got a recent report in bug 1663400 about problems with SED, but no crash was reported yet.

On which operating system does Thunderbird crash for you?
You are running 32bit or 64bit executable?

Windows 10, 32-bit executable.

Do you get a crash ID in your profile folder, it would enable us to look at details.

I did: Crash ID: bp-45ca6e6e-1c25-4a47-927e-ab4410200914

Bug 1663400 has instructions for sending a test message. Could you please import those keys, and then compose an encrypted email, that is encrypted both to your own key and to one of the example keys from bug 1663400?

Please send the test message to the mentioned address, and let us know here after you have sent it.

I am not able to import attachment 9174231 [details] which is reminiscent of bug 1663269, should this be fixed with TB 78.2.2?

(In reply to f.fainelli from comment #5)

(In reply to Kai Engert (:KaiE:) from comment #3)

We got a recent report in bug 1663400 about problems with SED, but no crash was reported yet.

On which operating system does Thunderbird crash for you?
You are running 32bit or 64bit executable?

Windows 10, 32-bit executable.

Do you get a crash ID in your profile folder, it would enable us to look at details.

I did: Crash ID: bp-45ca6e6e-1c25-4a47-927e-ab4410200914

This is Bug 1659919 - crash [@ mime_LineBuffer] - the patch is in 78.2.2 (currently on beta), which hopefully will fix your crash

p.s. please use bug #### rather than URLs

(In reply to Wayne Mery (:wsmwk) from comment #6)

(In reply to f.fainelli from comment #5)

(In reply to Kai Engert (:KaiE:) from comment #3)

We got a recent report in bug 1663400 about problems with SED, but no crash was reported yet.

On which operating system does Thunderbird crash for you?
You are running 32bit or 64bit executable?

Windows 10, 32-bit executable.

Do you get a crash ID in your profile folder, it would enable us to look at details.

I did: Crash ID: bp-45ca6e6e-1c25-4a47-927e-ab4410200914

This is Bug 1659919 - crash [@ mime_LineBuffer] - the patch is in 78.2.2 (currently on beta), which hopefully will fix your crash

p.s. please use bug #### rather than URLs

I am using TB 78.2.2, at least that's what the About says is there another version that I can try?

I was wrong - the patch will appear in 78.3.0.

I am using TB 78.2.2, at least that's what the About says is there another version that I can try?

Your crash report says 78.2.1. But no matter, the patch is not in 78.2.2 either.

(In reply to Wayne Mery (:wsmwk) from comment #8)

I was wrong - the patch will appear in 78.3.0.

OK, I can probably import the keys in gnupg and re-export them for import into Thunderbird, that appears to work nicely.

I am using TB 78.2.2, at least that's what the About says is there another version that I can try?

Your crash report says 78.2.1. But no matter, the patch is not in 78.2.2 either.

Right sorry about that, I had briefly swapped the versions just in case this was a regression. Here is another crash ID: 9e490ccb-9591-4cd3-839a-94ff00200914

(In reply to Kai Engert (:KaiE:) from comment #3)

Bug 1663400 has instructions for sending a test message. Could you please import those keys, and then compose an encrypted email, that is encrypted both to your own key and to one of the example keys from bug 1663400?

Please send the test message to the mentioned address, and let us know here after you have sent it.

You should have received one on alice-test@kuix.de with Message-Id: 834f1d06-9ccc-39f3-4244-d77a48b5f5ae (omitting the domain for privacy). I can read this email correctly from the Sent folders or my Inbox. Does that help?

Summary: PGP encrypted emails crash Thunderbird → PGP encrypted emails crash Thunderbird [@ mime_LineBuffer]

Thank you, the test message has allowed me to analyze the issue.
The issue is NOT fixed by the patch from bug 1659919.

I want to avoid sharing the details that I found for now, to avoid that someone uses the knowledge to DoS users.
I'm marking this as a duplicate of bug 1665475 which we can use to discuss the technical details.

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE

Confirmed fixed with 78.3.1, thanks a lot for your prompt response!

You need to log in before you can comment on or make changes to this bug.