Check gethostname(2) return code - but even if it succeeds it may not

null terminate.

Temporarily use "From: $user@$hostname" rather than "From: $user".
The latter exposes incompatible behavior if using dma(8).  sendmail(8)
(and other alternatives) canonify either form on submission (even
if masquerading), but dma will leak a non-compliant address to
the internet.
This commit is contained in:
Peter Wemm 2014-08-05 01:32:09 +00:00
parent 7c1be3f5c7
commit 713c03d57a
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=269550

View File

@ -481,14 +481,17 @@ child_process(e, u)
auto char mailcmd[MAX_COMMAND];
auto char hostname[MAXHOSTNAMELEN];
(void) gethostname(hostname, MAXHOSTNAMELEN);
if (gethostname(hostname, MAXHOSTNAMELEN) == -1)
hostname[0] = '\0';
hostname[sizeof(hostname) - 1] = '\0';
(void) snprintf(mailcmd, sizeof(mailcmd),
MAILARGS, MAILCMD);
if (!(mail = cron_popen(mailcmd, "w", e))) {
warn("%s", MAILCMD);
(void) _exit(ERROR_EXIT);
}
fprintf(mail, "From: %s (Cron Daemon)\n", usernm);
fprintf(mail, "From: Cron Daemon <%s@%s>\n",
usernm, hostname);
fprintf(mail, "To: %s\n", mailto);
fprintf(mail, "Subject: Cron <%s@%s> %s\n",
usernm, first_word(hostname, "."),