[Bug 290150] New: When filter action "Set Reply-To To" executes on an email which has no "Reply-To:" header, KMail segfaults

[Andrew Munkres]

https://bugs.kde.org/show_bug.cgi?id=290150

           Summary: When filter action "Set Reply-To To" executes on an
                    email which has no "Reply-To:" header, KMail segfaults
           Product: kmail2
           Version: 4.7
          Platform: Archlinux Packages
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: crash
          Priority: NOR
         Component: filtering
        AssignedTo: kdepim-bugs at kde.org
        ReportedBy: amunkres at nyx.net


Version:           4.7 (using KDE 4.7.3) 
OS:                Linux

I had a filter configured with one filter criterion (match on the "From:"
header contents) and two filter actions: 1) set the "Reply-To:" to a cetain
value, and 2) move the message into a certain folder. This morning, a message
arrived which had a "From:" header that matched that filter's filter criterion
and did not have any "Reply-To:" header. When it arrived, KMail segfaulted (the
traceback showed that the segfault occurred in thread #1 from within the
library libkmime.so.4; I'm using Arch's packages of KMail and KDEPIM, which
don't have debugging symbols, so I don't have a detailed traceback). What's
more, the offending message remained in the inbox after the crash, so KMail
would try again to process the message upon startup; this would cause KMail to
crash immediately upon startup every time.

I figured out which message was causing the problem by manually moving the
message files out of the maildir and then trying to start KMail, until it would
start without crashing; I confirmed that it was this one particular message
that made it crash by starting KMail with only that message removed from the
maildir directory (in which case KMail started without crashing) and with that
message present in the maildir directory (in which case KMail crashed upon
startup).

After successfully starting KMail, I then replaced the "Set Reply-To To" filter
action with an "Add Header" action, quit KMail, put the message file back in
the maildir directory, and started KMail. This time, KMail did not crash, and
processed the incoming message appropriately according to the filter rule.


Reproducible: Always

Steps to Reproduce:
1) Create a filter with some arbitrary filter criteria and a "Set Reply-To To"
filter action.
2) Compose a message which matches the filter's criteria and does not contain a
"Reply-To:" header.
3) Save the message into a local maildir folder.
3) Quit KMail.
4) Move the message into the "new" subdirectory of your local "inbox" maildir
(renaming the message file appropriately if necessary).
5) Start KMail.

Actual Results:  
KMail will segfault, the traceback showing that the segfault occurred in thread
#1 from within the library libkmime.so.4.

Expected Results:  
KMail should have either left the message's headers unchanged or added a
"Reply-To:" header, in either case it shouldn't have crashed.

This actually happened with KMail 4.7.4 from KDEPIM 4.7.4 (Arch packages
"kdepim-kmail 4.7.4-1" and "kdepimlibs 4.7.4-1"), but 4.7.4 isn't currently
listed in the "KDE Version" drop-down in this Bugzilla.

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.