diff options
| author | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2017-08-09 19:15:20 +0100 |
|---|---|---|
| committer | Andrew Lewis <nerf@judo.za.org> | 2017-08-28 13:08:06 +0200 |
| commit | 1a29085975194c17d31019768a7f7ec374642960 (patch) | |
| tree | 7db17ce4cf71295aa08826c2badfe702ed4802b7 | |
| parent | c4b7a3072b00a2fa0c0bfa381b71181aa104cd89 (diff) | |
| download | rspamd-1a29085975194c17d31019768a7f7ec374642960.tar.gz rspamd-1a29085975194c17d31019768a7f7ec374642960.zip | |
[Fix] Reject invalid bh for DKIM signatures earlier
| -rw-r--r-- | src/libserver/dkim.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/libserver/dkim.c b/src/libserver/dkim.c index 06adab305..72cc7232f 100644 --- a/src/libserver/dkim.c +++ b/src/libserver/dkim.c @@ -2196,6 +2196,14 @@ rspamd_dkim_check (rspamd_dkim_context_t *ctx, } } } + else { + msg_debug_dkim ( + "bh value mismatch: %*xs versus %*xs", + dlen, ctx->bh, + dlen, cached_bh->digest_normal); + + return DKIM_REJECT; + } } if (cpy_ctx) { |