boguszip
diff --git a/mail/lib/validateattachment b/mail/lib/validateattachment
index 03d3f0e..d21044f 100755
--- a/mail/lib/validateattachment
+++ b/mail/lib/validateattachment
@@ -5,9 +5,9 @@
# exit status matching:
#
-# *discard* - is really bad, refuse the message
-# *accept* - is really good, leave attachment alone
-# * - rewrite attachment to have .suspect extension
+# $discard - is really bad, refuse the message
+# $accept - is really good, leave attachment alone
+# anything else - rewrite attachment to have .suspect extension
#
# magic exit statuses known to vf
@@ -21,6 +21,15 @@
exit usage
}
+# some idiot virus is sending around attachments marked as .zip
+# that are completely bogus and just say %TS_ZIP_ATTACH%
+# as the base64 encoding of the zip file. gmail rejects all zip
+# attachments when we forward them, so nip this one here.
+if(grep -s '^%TS_ZIP_ATTACH%$' $1 && ~ `{wc -l <$1} 1 2 3 4 5 6 7 8 9 10){
+ echo bogus zip file!
+ exit $discard
+}
+
upas/unvf < $1 >$1.unvf
file=$1.unvf
fn sigexit { rm $file }
@@ -40,6 +49,7 @@
exit $accept
case *'zip archive'*
+
# >[2=1] because sometimes we get zip files we can't parse
# but the errors look like
# unzip: reading data for philw.doc.scr failed: ...
