Open Bug 1770004 Opened 2 years ago Updated 2 years ago

Email with inline PGP key at the end of body shows only the inline openpgp block -----BEGIN PGP PUBLIC KEY BLOCK-----

Categories

(MailNews Core :: Security: OpenPGP, defect)

Thunderbird 91
defect

Tracking

(Not tracked)

People

(Reporter: santeri.kannisto, Unassigned)

References

(Regression)

Details

(Keywords: regression)

Attachments

(1 file)

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0

Steps to reproduce:

  1. Send an email with a PGP key at the end of the email body
  2. Receive it in Thunderbird
  3. When you read the message, the message body will contain only the PGP key and nothing else. You can still see the message if you view the whole message.

This happened with the following key:

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=3Da5M1
-----END PGP PUBLIC KEY BLOCK-----

Actual results:

Message body content stripped out if the body contain a PGP key.

Expected results:

The message should have been shown together with the key.

Please attach a sample message as .eml

Component: Message Reader UI → Security: OpenPGP
Product: Thunderbird → MailNews Core
Attached file sample.eml

Sample of an email that is not shown correctly.

(In reply to Magnus Melin [:mkmelin] from comment #1)

Please attach a sample message as .eml

I noticed you changed the component. I have not read thesource code so I am just guessing here, but are you sure the issue is in PGP?

The message was not encrypted with PGP and therefore Thunderbird should not try to decrypt, just show it as it is plain text.

Cheers,

Santeri

It is, I can even (very) briefly see the message text before the openpgp processing has taken place.
https://searchfox.org/comm-central/rev/b7cc2508b3fa414260984118c8c66c21edd9ee3b/mail/extensions/openpgp/content/ui/enigmailMessengerOverlay.js#1597

Looks like this would be from bug 1673241

Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: regression
Regressed by: CVE-2021-29957
Summary: Email with PGP signature at the end of body shows only the signature → Email with inline PGP signature at the end of body shows only the inline openpgp signature block -----BEGIN PGP PUBLIC KEY BLOCK-----
Summary: Email with inline PGP signature at the end of body shows only the inline openpgp signature block -----BEGIN PGP PUBLIC KEY BLOCK----- → Email with inline PGP key at the end of body shows only the inline openpgp block -----BEGIN PGP PUBLIC KEY BLOCK-----
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: