288632 - Endless loop in displaying a message

Status: RESOLVED INCOMPLETE

(Thunderbird :: Mail Window Front End, defect)

Description

[Hadmut Danisch]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050210 Firefox/1.0 (Debian package 1.0+dfsg.1-6)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050210 Firefox/1.0 (Debian package 1.0+dfsg.1-6)

Hi,
when trying to display the message (in the bug report attachment) from an 
IMAP server, thunderbird goes into an endless loop. Might be a security
problem.

Reproducible: Always

Steps to Reproduce:
1. Put the attached file (unix mbox format) onto your IMAP server
2. Subscribe to the Folder
3. Try to display the message

Actual Results:  
Thunderbird does not display, but goes into an endless loop 
with 100% cpu usage

Comment 1

[Hadmut Danisch]

Attachment: Testmail in mbox file format

Dangerous: The attached mail might contain virus and drives thunderbird into an
endless loop. Be careful.

Comment 2

[Daniel Veditz [:dveditz]]

The attached contents look completely innocuous, and I couldn't create a loop.
Do you know what vendor/version of IMAP server you're using?

The text of the message says a virus was removed, was that before or after you
had a problem with it? Maybe what you attached is not the same as the thing that
caused you problems.

Comment 3

[Hadmut Danisch]

I am not sure about the imap server, because I moved from uw-imapd to dovecot
and are not sure whether this was before or after I reported the bug. But I
believe it was still the uw-imapd (debian distribution).

I don't have a virus filter or anything which removes a virus. I guess that's a
hoax to fool recipients into trusting the message.

regards
Hadmut

Comment 4

[Daniel Veditz [:dveditz]]

Clearing security flag in the hopes that we'll have better luck reproducing this with more folks looking at it.

Comment 5

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Reporter, does the issue still occur in the latest supported 2.0.0.x / Shredder trunk nightlies?

(1.5.0.x is now end-of-life and the latest supported 2.0.0.x is 2.0.0.16)

Comment 6

[Joshua Cranmer [:jcranmer]]

RESO INCO per lack of response to last question. If you feel this change was made in error, please respond to this bug with your reasons why.