Bug #80088 for Net-IMAP-Simple: Login fails for passwords ending with a blackslash '\'

Wed Oct 10 03:54:18 2012 https://www.google.com/accounts/o8/id?id=AItOawm7UlJoGLTwkiDhn4lCgn4DYtDdhL05BWo - Ticket created

Subject:

Login fails for passwords ending with a blackslash '\'

When you Login to IMAP-Accounts that have a password ending on '\' backslash this slash is used to esacpe the quotes in the LOGIN-Command that are usually around the password. This results in an IMAP-Error-Message saying something about "extra parameters". The Problem can be avoided placing two backslashes instead of one \\ and thus escaping the first backslash result in a correct password. Such things should be done by the module and not by the user or the intermediate software using the plugin.

Wed Oct 10 07:23:35 2012 jettero [...] cpan.org - Correspondence added

I agree, generally speaking. If you ran a fuzzer on this module it would fail completely. I have an escape function that I built for this sort of thing. I'm sure this occurs elsewhere in the package and I'm sure my _escape() hack doesn't catch everything ... But it will fix your problem. This module could use a top-down overhaul, but I wonder if there aren't already other packages that do it better. Anyway, look for 1.2.034 on my website (jettero.pl) or on the CPAN. -Paul -- If riding in an airplane is flying, then riding in a boat is swimming. 116 jumps, 48.6 minutes of freefall, 92.9 freefall miles.

Wed Oct 10 07:23:36 2012 The RT System itself - Status changed from 'new' to 'open'

Wed Oct 10 07:24:05 2012 jettero [...] cpan.org - TimeWorked changed from (no value) to '20'

Wed Oct 10 07:24:05 2012 jettero [...] cpan.org - Status changed from 'open' to 'resolved'

Wed Oct 10 07:24:05 2012 jettero [...] cpan.org - Given to JETTERO

Wed Oct 10 08:39:09 2012 https://www.google.com/accounts/o8/id?id=AItOawm7UlJoGLTwkiDhn4lCgn4DYtDdhL05BWo - Correspondence added

Thanks a lot for the quick fix. Gonna update right away. Am Mi 10. Okt 2012, 07:23:35, JETTERO schrieb: Show quoted text

> I agree, generally speaking. If you ran a fuzzer on this module it > would fail completely. > > I have an escape function that I built for this sort of thing. I'm sure > this occurs elsewhere in the package and I'm sure my _escape() hack > doesn't catch everything ... But it will fix your problem. This module > could use a top-down overhaul, but I wonder if there aren't already > other packages that do it better. > > Anyway, look for 1.2.034 on my website (jettero.pl) or on the CPAN. > > -Paul >

Wed Oct 10 08:39:10 2012 The RT System itself - Status changed from 'resolved' to 'open'

Wed Oct 10 10:07:14 2012 jettero [...] cpan.org - Correspondence added

Replying reopens the ticket. re-closing. :p -- If riding in an airplane is flying, then riding in a boat is swimming. 116 jumps, 48.6 minutes of freefall, 92.9 freefall miles.

Wed Oct 10 10:07:15 2012 jettero [...] cpan.org - Status changed from 'open' to 'resolved'