LO60875: Enforce Strict Rfc822 Addressing On Incoming Smtp Mail

APAR status

• Closed as program error.

Error description

• Customers receive internet mails with friendly names
  that include commas. If the friendly names is charset encoded
   we can strip the comma with RFC822StripUnquotedDelimiters=1.
   There are an increasing number of cases, however, where a
   comma is used in the friendly phrase between lastname and
   firstname without the phrase being quoted, e.g. lastname,
   firstname <user@acme.com> instead of "lastname, firstname"
   <user@acme.com>  In 8.5.4 code has been added to handle these
   types of addresses as follows: SPR# TPON8GYCM8 - This fix
   configures the address parser to compensate for the way some
   third party applications send invalid rfc822 addresses where
   names are formatted as Last, First (without proper use of
   quotations to prevent the comma from being treated as a
   delimiter).  The fix ensures these phrases are surrounded by
   quotes and recognized as a single individual's full name
   formatted as "Last, First."  This fix introduces a new
   Notes.ini parameter but it is on by default.
   RFCStripUnquotedDelimiters=1.  It may be set to 0 to disable.
  

Local fix

Problem summary

• A programming error was found and will be corrected in a future
   release.
  

Problem conclusion

• A programming error was found and will be corrected in a future
   release.
  

Temporary fix

Comments

• This APAR is associated with SPR# TPON8GYCM8.
  some third party applications are sending invalid rfc822
   addresses because the phrase part of the internet address has
   a 'special character' (typically comma), but it is not quoted,
   as is required.  for example--    Lyons, Paul    --rather
   than:    "Lyons, Paul"    this error messes up the notes
   client when it replies to such an address as it sees the
   unquoited comma as a delimiter and therefore treats "Lyons"
   and "Paul" (from the above example) as if it were two
   different addresses rather than part of a single
   address.    this change alters the address parser so that it
   recognizes such phrases; the parser now corrects the invalid
   phrases by surrounding them with quotes.    additional notes
   for this submission:    during testing, we found and fixed a
   stack overwrite in comptext.c.  to support the easy finding
   and fixing of stack overwrites, i added code to libstart.c,
   which defines the main entry point for dlls, and to addin.c,
   which defines the entry point for programs.  this codeis only
   active if one compiles with STACk_OVERWRITE defined and uses
   the /GS compiler switch and only if one is building for w32.
   (the stack overwrite detection mechanisms are different on
   other platforms.)    the /GS switch causes the MS compiler to
   insert code at function entry and exit to detect stack
   overwrites.  the new code hooks the exception handler that's
   invoked for an overwrite, causing it to transfer control to
   the Panic() routine.  this in turn prints the call stack which
   will identify the function which caused the stack
   overwrite.    in the next couple of weeks, i will coordinate
   with the necessry parties to get this feature turned on by
   default oin non-prod builds so we can deploy it in the iris
   and notes domains to catch these very difficult to find
   errors.    after that, i'll work on doing the same for w64 and
   other builds.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NOTES CLIENT

• Fixed component ID

  5724E6255

Applicable component levels

• R851 PSN

     UP