You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Eric Charles (JIRA)" <se...@james.apache.org> on 2013/04/23 21:05:16 UTC

[jira] [Commented] (IMAP-374) Client command line length limit is problematic

    [ https://issues.apache.org/jira/browse/IMAP-374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13639424#comment-13639424 ] 

Eric Charles commented on IMAP-374:
-----------------------------------

Let's fix C.

For the limit, sky is our limit but not JVM's one (memory...). Even if RFC does not define any limit, there will always be one (such as we limit in the database the length of the mail body).
We should protect ourselves against denial-of-service (without limit, it would be quite easy to fill in the complete memory with an infinite line).

I am curious to see the content of your 23000 character line, and to know the technical client that produces this :)

Thx, Eric
                
> Client command line length limit is problematic
> -----------------------------------------------
>
>                 Key: IMAP-374
>                 URL: https://issues.apache.org/jira/browse/IMAP-374
>             Project: James Imap
>          Issue Type: Bug
>          Components: Protocol
>            Reporter: Andrzej Rusin
>            Assignee: Eric Charles
>
> I believe (based on some observations) that:
> A) maximum client command line length in James IMAP is 8192 as defined in org.apache.james.protocols.netty.AbstractChannelPipelineFactory.MAX_LINE_LENGTH.
> B) I do not think that IMAP RFC limits the line length, at least I did not find any reference of that.
> C) James IMAP does not seem to reply with BAD when it sees a too long line.
> D) Some clients send quite long lines (I just saw one about 23000 characters and sky is the limit) and they probably expect some answer, hanging indefinitely.
> So:
> 1. If B is true, then we should not practically really limit in A; or rather the limit should be really high. And looks like 640K is not enough for everyone anymore ;)
> 2. Probably C should be fixed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org