You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Support SpamAssassin <Sp...@jam-software.com> on 2016/03/23 10:26:20 UTC

warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Hi,
since we released our new SpamAssassin for Windows we get some reports of users having these warnings in their spamd log:

Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $3 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $2 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.sbl.spamhaus.org. type=A class=IN) failed: a domain name contains a null label
Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.zen.spamhaus.org. type=A class=IN) failed: a domain name contains a null label

We put an additional warn line into URIDNSBL.pm telling the content of $ip.

? It is "("
Thu Mar 17 11:31:21 2016 [-2876] warn: uridnsbl: lookup_dnsbl_for_ip $ip: ( at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1039.

It looks like an parsing problem of SpamAssassin. Un fortunately I'm not able to reproduce it.
However does anyone have an idea how this bracket may get into the variable?

Best regards,

Harald Binkle

________________________________



--------------------------------------------------------
JAM Software GmbH
Managing Director: Joachim Marder
Am Wissenschaftspark 26 * 54296 Trier * Germany
Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29
Commercial register number HRB 4920 (AG Wittlich) http://www.jam-software.com

________________________________



----------------------------------------------------
JAM Software GmbH
Gesch?ftsf?hrer: Joachim Marder
Am Wissenschaftspark 26 * 54296 Trier * Germany
Tel: 0651-145 653 -0 * Fax: 0651-145 653 -29
Handelsregister Nr. HRB 4920 (AG Wittlich) http://www.jam-software.de

Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Posted by "Kevin A. McGrail" <ke...@mcgrail.com>.
On 6/8/2017 9:06 AM, Bill Cole wrote:
> This sample does not produce the error for me using a patched SA 3.4.1 

Concur.  I believe the issue at hand is duplicated bugs that confuse 
thing but I've considered this patched for a decently long time.

Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 7 Jun 2017, at 22:52, Philip Prindeville wrote:

> I’m still seeing this now.
>
> And yes, for spamhaus.  And yes, $ip is being passed in as ‘(‘.  
> It should be possible to get a stack trace and figure out why it’s 
> being passed in as that value...
>
> Are we any closer to having a fix for this?

This bug has patches which have been integrated in svn:
    https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7231

This is my analysis of the root cause in a duplicate bug:
    https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7339#c2

>
> I’m leaving a file here:
>
> http://www.redfish-solutions.com/downloads/spamhaus.eml
>
> where I can reproduce the issue with:
>
> % spamassassin -D check -t spamhaus.eml

This sample does not produce the error for me using a patched SA 3.4.1

Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Posted by Philip Prindeville <ph...@redfish-solutions.com>.
I’m still seeing this now.

And yes, for spamhaus.  And yes, $ip is being passed in as ‘(‘.  It should be possible to get a stack trace and figure out why it’s being passed in as that value...

Are we any closer to having a fix for this?

I’m leaving a file here:

http://www.redfish-solutions.com/downloads/spamhaus.eml

where I can reproduce the issue with:

% spamassassin -D check -t spamhaus.eml

Thanks



> On Mar 23, 2016, at 10:00 AM, Kevin A. McGrail <KM...@PCCC.com> wrote:
> 
> Is it only happening with spamhaus?
> Regards,
> KAM
> 
> On March 23, 2016 5:26:20 AM EDT, Support SpamAssassin <Sp...@jam-software.com> wrote:
> Hi,
> 
> 
> 
> since we released our new SpamAssassin for Windows we get some reports of users having these warnings in their spamd log:
> 
> 
> 
> 
>  
> 
> Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
> Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $3 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
> Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $2 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
> Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.sbl.spamhaus.org. type=A class=IN) failed: a domain name contains a null label
> Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.zen.spamhaus.org. type=A class=IN) failed: a domain name contains a null label
> 
> 
> 
> 
>  
> 
> We put an additional warn line into URIDNSBL.pm telling the content of $ip.
> 
> 
> 
> è It is “(”
> 
> 
> 
> Thu Mar 17 11:31:21 2016 [-2876] warn: uridnsbl: lookup_dnsbl_for_ip $ip: ( at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1039.
> 
> 
> 
> 
>  
> 
> It looks like an parsing problem of SpamAssassin. Un fortunately I’m not able to reproduce it.
> 
> 
> 
> However does anyone have an idea how this bracket may get into the variable?
> 
> 
> 
> 
>  
> 
> Best regards,
> 
> 
> 
> 
>  
> 
> Harald Binkle
> 
> 
> 
> 
> 
> 
> 
> --------------------------------------------------------
> JAM Software GmbH
> Managing Director: Joachim Marder
> Am Wissenschaftspark 26 * 54296 Trier * Germany
> Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29
> Commercial register number HRB 4920 (AG Wittlich) http://www.jam-software.com
> 
> 
> 
> 
> ----------------------------------------------------
> JAM Software GmbH
> Geschäftsführer: Joachim Marder
> Am Wissenschaftspark 26 * 54296 Trier * Germany
> Tel: 0651-145 653 -0 * Fax: 0651-145 653 -29
> Handelsregister Nr. HRB 4920 (AG Wittlich) http://www.jam-software.de

AW: AW: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Posted by Support SpamAssassin <Sp...@jam-software.com>.
Hello Kevin,
Thanks for your hint.
Yes it seemed to be caused by the DNS cache.
Resetting it solved the problem for the user.
However wouldn’t it be better to give a proper warning in such a case?
It’s really strange that a content like “(” is passed to “lookup_dnsbl_for_ip”.
Shoudn’t that be avoided?
I suggest to validate the extracted content to match some IP criteria before trying to parse the sub parts.
And if the content does not match a proper warning with a possible solution suggestion should be formulated, like “….it may be caused by DNS cache issues, please reset your DNS cache”.

Greetings
Harald


Von: Kevin A. McGrail [mailto:KMcGrail@PCCC.com]
Gesendet: Montag, 28. März 2016 22:08
An: Support SpamAssassin <Sp...@jam-software.com>
Betreff: Re: AW: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

My thought is some reason SpamHaus is returning a bad query.  Rate limit or problem?  Can you manually query and see what's returned?

Are you using a local caching nameserver?

Regards,
KAM

On 3/24/2016 4:28 AM, Support SpamAssassin wrote:
Hello Kevin,
Yes, all occurrences we know are related to spamhaus.
And it does not happen for all messages. It only triggered by some messages.
One user gets the warnings for one kind of newsletter:

Here are the headers:

Return-Path: info@XXX.YY<ma...@XXX.YY>
Delivered-To: AAAA@BBBB.CC<ma...@BBBB.CC>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on WIN-2012-STD-R2
X-Spam-Level:
X-Spam-Status: No, score=-200.0 required=4.0 tests=SHORTCIRCUIT,SPF_PASS,
       T_RP_MATCHES_RCVD,USER_IN_DKIM_WHITELIST,USER_IN_SPF_WHITELIST
       shortcircuit=ham autolearn=disabled version=3.4.1
Received: from webgrida091.emsecure.net (webgrida091.emsecure.net [176.62.161.91])
       by ip3e832edd.speed.planet.nl with ESMTP
       ; Wed, 23 Mar 2016 05:06:36 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
       d=XXX.YY; s=kruidvat2; x=1459310741;
       i=@XXX.YY<ma...@XXX.YY>; h=from:to:subject:date:reply-to:
       message-id:feedback-id:list-id:mime-version:content-type; bh=ho/
       Wx9zGzVzETt82nkA81DgjtokN8SVi0uvjJ2fNuBA=; b=rRHKZkm4kVvrHPWmUVy
       8sCL/+mST0lW3LQ/rj8g2zO6dAybic6xL553nmdMbx5BgT8RaA8jR3EbB7eAthnx
       OTCXvXqSqS1WoNE9716JZTe4qzvl6T+mfcyKxmYt1XTlQFjUoEnKx+FP/RzrzXXT
       9UjB0fWSqKLC72YSXqWP1NYQ=
From: "ZZZZZ" <in...@XXX.YY>
To: "AAAA" <AA...@BBBB.CC>
Subject: =?utf-8?B?TWFhayBrYW5zIG9wIDEgdmFuIGRlIA==?=
=?utf-8?B?NCBob3RlbGJvbm5lbiB0Lncudi4gMQ==?=
=?utf-8?B?MDAgZXVybyEgLyBOdSBTYW5kZXJzIA==?=
=?utf-8?B?cHV6emVsYm9la2plcyB2b29yIOKCrDAs?=
=?utf-8?B?OTkh?=
Date: Wed, 23 Mar 2016 04:05:41 +0000
Reply-To: "ZZZZZ" <in...@XXX.YY>
Message-ID: <PA...@webgrida091.emsecure.net>
X-GRID-REF: 8A66B7582E9A48E5AC85DC32E810B6FA.PATT3L72_10540129_geSq81nq1r8HCKphZ5apUg==
X-MA-Reference: SIM_6t56DwaphLeh9eDDgNzQmeFjJs30tArE6RJwjaJWSTqS6I26H
X-MA-Instance: SIM_6t56DwaphLeh9eDDgNzQmeFjJs30tArE6RJwjaJWSTqS6I26H.5143a42bcb29458511d1f6387d094716
Feedback-ID: 72:4871:10540129:R1CHPATT3L
List-ID: <181.4871.XXX.YY>
MIME-Version: 1.0
Content-Type: multipart/alternative;
       boundary="_NexPart_001_"

Any idea?

Best regards,

Harald Binkle

Von: Kevin A. McGrail [mailto:KMcGrail@PCCC.com]
Gesendet: Mittwoch, 23. März 2016 17:01
An: Support SpamAssassin <Sp...@jam-software.com>; dev@spamassassin.apache.org<ma...@spamassassin.apache.org>
Betreff: Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Is it only happening with spamhaus?
Regards,
KAM
On March 23, 2016 5:26:20 AM EDT, Support SpamAssassin <Sp...@jam-software.com>> wrote:
Hi,
since we released our new SpamAssassin for Windows we get some reports of users having these warnings in their spamd log:


Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $3 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $2 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.sbl.spamhaus.org. type=A class=IN) failed: a domain name contains a null label
Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.zen.spamhaus.org. type=A class=IN) failed: a domain name contains a null label


We put an additional warn line into URIDNSBL.pm telling the content of $ip.

è It is “(”
Thu Mar 17 11:31:21 2016 [-2876] warn: uridnsbl: lookup_dnsbl_for_ip $ip: ( at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1039.


It looks like an parsing problem of SpamAssassin. Un fortunately I’m not able to reproduce it.
However does anyone have an idea how this bracket may get into the variable?


Best regards,


Harald Binkle

________________________________



--------------------------------------------------------
JAM Software GmbH
Managing Director: Joachim Marder
Am Wissenschaftspark 26 * 54296 Trier * Germany
Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29
Commercial register number HRB 4920 (AG Wittlich) http://www.jam-software.com
________________________________



----------------------------------------------------
JAM Software GmbH
Geschäftsführer: Joachim Marder
Am Wissenschaftspark 26 * 54296 Trier * Germany
Tel: 0651-145 653 -0 * Fax: 0651-145 653 -29
Handelsregister Nr. HRB 4920 (AG Wittlich) http://www.jam-software.de

--
Kevin A. McGrail
CEO

Peregrine Computer Consultants Corporation
3927 Old Lee Highway, Suite 102-C
Fairfax, VA 22030-2422

http://www.pccc.com/

703-359-9700 x50 / 800-823-8402 (Toll-Free)
703-798-0171 (wireless)
KMcGrail@PCCC.com<ma...@pccc.com>
[cid:image001.gif@01D18FEC.E12C5D90]

AW: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Posted by Support SpamAssassin <Sp...@jam-software.com>.
Hello Kevin,
Yes, all occurrences we know are related to spamhaus.
And it does not happen for all messages. It only triggered by some messages.
One user gets the warnings for one kind of newsletter:

Here are the headers:

Return-Path: info@XXX.YY
Delivered-To: AAAA@BBBB.CC
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on WIN-2012-STD-R2
X-Spam-Level:
X-Spam-Status: No, score=-200.0 required=4.0 tests=SHORTCIRCUIT,SPF_PASS,
       T_RP_MATCHES_RCVD,USER_IN_DKIM_WHITELIST,USER_IN_SPF_WHITELIST
       shortcircuit=ham autolearn=disabled version=3.4.1
Received: from webgrida091.emsecure.net (webgrida091.emsecure.net [176.62.161.91])
       by ip3e832edd.speed.planet.nl with ESMTP
       ; Wed, 23 Mar 2016 05:06:36 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
       d=XXX.YY; s=kruidvat2; x=1459310741;
       i=@XXX.YY; h=from:to:subject:date:reply-to:
       message-id:feedback-id:list-id:mime-version:content-type; bh=ho/
       Wx9zGzVzETt82nkA81DgjtokN8SVi0uvjJ2fNuBA=; b=rRHKZkm4kVvrHPWmUVy
       8sCL/+mST0lW3LQ/rj8g2zO6dAybic6xL553nmdMbx5BgT8RaA8jR3EbB7eAthnx
       OTCXvXqSqS1WoNE9716JZTe4qzvl6T+mfcyKxmYt1XTlQFjUoEnKx+FP/RzrzXXT
       9UjB0fWSqKLC72YSXqWP1NYQ=
From: "ZZZZZ" <in...@XXX.YY>
To: "AAAA" <AA...@BBBB.CC>
Subject: =?utf-8?B?TWFhayBrYW5zIG9wIDEgdmFuIGRlIA==?=
=?utf-8?B?NCBob3RlbGJvbm5lbiB0Lncudi4gMQ==?=
=?utf-8?B?MDAgZXVybyEgLyBOdSBTYW5kZXJzIA==?=
=?utf-8?B?cHV6emVsYm9la2plcyB2b29yIOKCrDAs?=
=?utf-8?B?OTkh?=
Date: Wed, 23 Mar 2016 04:05:41 +0000
Reply-To: "ZZZZZ" <in...@XXX.YY>
Message-ID: <PA...@webgrida091.emsecure.net>
X-GRID-REF: 8A66B7582E9A48E5AC85DC32E810B6FA.PATT3L72_10540129_geSq81nq1r8HCKphZ5apUg==
X-MA-Reference: SIM_6t56DwaphLeh9eDDgNzQmeFjJs30tArE6RJwjaJWSTqS6I26H
X-MA-Instance: SIM_6t56DwaphLeh9eDDgNzQmeFjJs30tArE6RJwjaJWSTqS6I26H.5143a42bcb29458511d1f6387d094716
Feedback-ID: 72:4871:10540129:R1CHPATT3L
List-ID: <181.4871.XXX.YY>
MIME-Version: 1.0
Content-Type: multipart/alternative;
       boundary="_NexPart_001_"

Any idea?

Best regards,

Harald Binkle

Von: Kevin A. McGrail [mailto:KMcGrail@PCCC.com]
Gesendet: Mittwoch, 23. März 2016 17:01
An: Support SpamAssassin <Sp...@jam-software.com>; dev@spamassassin.apache.org
Betreff: Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Is it only happening with spamhaus?
Regards,
KAM
On March 23, 2016 5:26:20 AM EDT, Support SpamAssassin <Sp...@jam-software.com>> wrote:
Hi,
since we released our new SpamAssassin for Windows we get some reports of users having these warnings in their spamd log:


Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $3 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $2 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.
Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.sbl.spamhaus.org. type=A class=IN) failed: a domain name contains a null label
Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.zen.spamhaus.org. type=A class=IN) failed: a domain name contains a null label


We put an additional warn line into URIDNSBL.pm telling the content of $ip.

è It is “(”
Thu Mar 17 11:31:21 2016 [-2876] warn: uridnsbl: lookup_dnsbl_for_ip $ip: ( at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1039.


It looks like an parsing problem of SpamAssassin. Un fortunately I’m not able to reproduce it.
However does anyone have an idea how this bracket may get into the variable?


Best regards,


Harald Binkle

________________________________



--------------------------------------------------------
JAM Software GmbH
Managing Director: Joachim Marder
Am Wissenschaftspark 26 * 54296 Trier * Germany
Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29
Commercial register number HRB 4920 (AG Wittlich) http://www.jam-software.com
________________________________



----------------------------------------------------
JAM Software GmbH
Geschäftsführer: Joachim Marder
Am Wissenschaftspark 26 * 54296 Trier * Germany
Tel: 0651-145 653 -0 * Fax: 0651-145 653 -29
Handelsregister Nr. HRB 4920 (AG Wittlich) http://www.jam-software.de

Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042.

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
Is it only happening with spamhaus?
Regards,
KAM

On March 23, 2016 5:26:20 AM EDT, Support SpamAssassin <Sp...@jam-software.com> wrote:
>Hi,
>since we released our new SpamAssassin for Windows we get some reports
>of users having these warnings in their spamd log:
>
>Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $4 in
>concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm
>line 1042.
>Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $3 in
>concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm
>line 1042.
>Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $2 in
>concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm
>line 1042.
>Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet
>(domain=...(.sbl.spamhaus.org. type=A class=IN) failed: a domain name
>contains a null label
>Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet
>(domain=...(.zen.spamhaus.org. type=A class=IN) failed: a domain name
>contains a null label
>
>We put an additional warn line into URIDNSBL.pm telling the content of
>$ip.
>
>? It is "("
>Thu Mar 17 11:31:21 2016 [-2876] warn: uridnsbl: lookup_dnsbl_for_ip
>$ip: ( at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1039.
>
>It looks like an parsing problem of SpamAssassin. Un fortunately I'm
>not able to reproduce it.
>However does anyone have an idea how this bracket may get into the
>variable?
>
>Best regards,
>
>Harald Binkle
>
>________________________________
>
>
>
>--------------------------------------------------------
>JAM Software GmbH
>Managing Director: Joachim Marder
>Am Wissenschaftspark 26 * 54296 Trier * Germany
>Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29
>Commercial register number HRB 4920 (AG Wittlich)
>http://www.jam-software.com
>
>________________________________
>
>
>
>----------------------------------------------------
>JAM Software GmbH
>Gesch?ftsf?hrer: Joachim Marder
>Am Wissenschaftspark 26 * 54296 Trier * Germany
>Tel: 0651-145 653 -0 * Fax: 0651-145 653 -29
>Handelsregister Nr. HRB 4920 (AG Wittlich) http://www.jam-software.de