VM

Empty password in gmail - {XDH}

Bug #926285 reported by Uday Reddy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
VM
Incomplete
Medium
Uday Reddy

Bug Description

Uday says: (viewmail-info, 2011-08-08)

I was able to reproduce something similar by giving an empty password to
gmail. The session shows:
Starting IMAP over SSL session Mon Aug 08 10:37:33 2011
-- connecting to imap.gmail.com:993
* OK Gimap ready for requests from 92.232.137.113 b21if4769841wef.158
-- connected for folders
VM CAPABILITY
* CAPABILITY IMAP4rev1 UNSELECT IDLE NAMESPACE QUOTA ID XLIST CHILDREN X-GM-EXT-1 XYZZY SASL-IR AUTH=XOAUTH
VM OK Thats all she wrote! b21if4769841wef.158
VM LOGIN <parameters omitted>
* BYE [UNAVAILABLE] Temporary System Error
VM NO System Error {XDH} (Failure)
Process IMAP over SSL finished
Two problems here.
- First of all, gmail seems to have had an internal crash. How silly is
that? For an empty password?
- Secondly, it dumped some string "{XDH}", which, in IMAP protocol, is
supposed to mean, I am sending you a stream of data and here is its length.
After that there should be an end of line. VM's parser rightly flags up a
syntax error.

Related branches

Revision history for this message
Uday Reddy (reddyuday) wrote :

Fix committed in rev. 835.2.14.

Revision history for this message
Uday Reddy (reddyuday) wrote :

Fix reverted in rev. 1349 because it causes IMAP retrieval to hang (Bug 926210). We will ignore the bad gmail error messages for now. It shouldn't arise with VM now because we won't send empty passwords to gmail anyway.

Uday Reddy (reddyuday)
Changed in vm:
status: Fix Committed → Won't Fix
Uday Reddy (reddyuday)
tags: added: gmail
removed: mime
tags: added: imap
Revision history for this message
Uday Reddy (reddyuday) wrote :

Not sure what you mean. Do you get the {XDH} string? If this is common, perhaps we should handle it in VM, even though it is contrary to the official protocol.

Changed in vm:
status: Won't Fix → Incomplete
milestone: 8.2.0b → 8.2.90a
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.