KIC-8462852

Segmentation fault with 3072-bit key signatures in ARC-Seal headers

16

Hi, I was having some crashes and segfaults with some ARC-Seal headers. Upon investigation, I found that opendmarc crashes when trying to parse invalid ARC-Seal headers like this one: `"ARC-Seal:...

Hi guys, There is a memory leak at https://github.com/trusteddomainproject/OpenDMARC/blob/master/opendmarc/opendmarc.c#L2958-L2974 This is easily fixed with a free() as shown in the attached patch. [opendmarc-free-arcdomain-patch.txt](https://github.com/trusteddomainproject/OpenDMARC/files/6682308/opendmarc-free-arcdomain-patch.txt) I found this while I was reading...

Segfault with invalid or long values in ARC-Authentication-Results headers

3

Hi, This issue is similar to [#183](https://github.com/trusteddomainproject/OpenDMARC/issues/183) but this time involving invalid or very long values in **ARC-Authentication-Results** headers (instead of **ARC-Seal**). The patch fixes passing NULL value to **strlcpy**()...

Hi, There are two potential memory leaks when parsing [ARC-Authentication-Results](https://github.com/trusteddomainproject/OpenDMARC/blob/master/opendmarc/opendmarc.c#L2563-L2582) and [ARC-Seal](https://github.com/trusteddomainproject/OpenDMARC/blob/master/opendmarc/opendmarc.c#L2610-L2624) header fields. This patch fixes these memory leaks. Thx. [opendmarc.patch.txt](https://github.com/trusteddomainproject/OpenDMARC/files/11602321/opendmarc.patch.txt)