dovecot - Apr 2006 - sigsev with postfix + dovecot SASL

hi,

I am just playing a bit with the dovecot SASL plugin for postfix and so far my
tests have been very successfull, can't wait to get the cyrus-sasl beast
replaced.

However, I found a potential problem when doing some "illegal" stuff
on the
postfix side:

-------CUT-------
cerberus:/var/log# telnet smtptest 25
Trying 192.168.99.99...
Connected to smtptest.bestsolution.at.
Escape character is '^]'.
220 smtptest.bestsolution.at ESMTP Postfix (bestsolution.at GmbH)
EHLO localhost
250-smtptest.bestsolution.at
250-PIPELINING
250-SIZE 51200000
250-ETRN
250-AUTH PLAIN DIGEST-MD5 CRAM-MD5
250-AUTH=PLAIN DIGEST-MD5 CRAM-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
AUTH somestring
535 5.7.0 Error: authentication failed: Connection lost to authentication server
-------CUT-------

dovecot logs this:

-------CUT-------
dovecot: Apr 27 10:27:36 Error: auth(default): BUG: Authentication client 4315
requested unsupported authentication mechanism somestring
dovecot: Apr 27 10:27:36 Error: child 445 (auth) killed with signal 11
-------CUT-------

I am very aware that "AUTH somestring" is not valid in the given
context, but
dovecot should not sigsev IMO.

dovecot is 1.0-beta7.

regards

Udo Rader

b e s t s o l u t i o n . a t                        EDV Systemhaus GmbH
------------------------------------------------------------------------
udo rader               technischer leiter/CTO  mobile   +43 660 5263642
------------------------------------------------------------------------
eduard-bodem-gasse 8/3    A-6020 innsbruck      fax       +43 512 935833
http://www.bestsolution.at                      phone     +43 512 935834

On Thu, 2006-04-27 at 10:31 +0200, Udo Rader wrote:
> dovecot: Apr 27 10:27:36 Error: auth(default): BUG: Authentication client
4315
> requested unsupported authentication mechanism somestring
> dovecot: Apr 27 10:27:36 Error: child 445 (auth) killed with signal 11
Fixed the crash now in CVS, but I think the Postfix code also needs to
be updated to not to even try that.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20060505/40ad0fc2/attachment.bin>