Add sender to log line for DATA timeout.
[exim.git] / src / src / spool_in.c
CommitLineData
fb2274d4 1/* $Cambridge: exim/src/src/spool_in.c,v 1.9 2005/03/08 15:32:02 tom Exp $ */
059ec3d9
PH
2
3/*************************************************
4* Exim - an Internet mail transport agent *
5*************************************************/
6
c988f1f4 7/* Copyright (c) University of Cambridge 1995 - 2005 */
059ec3d9
PH
8/* See the file NOTICE for conditions of use and distribution. */
9
10/* Functions for reading spool files. When compiling for a utility (eximon),
11not all are needed, and some functionality can be cut out. */
12
13
14#include "exim.h"
15
16
17
18#ifndef COMPILE_UTILITY
19/*************************************************
20* Open and lock data file *
21*************************************************/
22
23/* The data file is the one that is used for locking, because the header file
24can get replaced during delivery because of header rewriting. The file has
25to opened with write access so that we can get an exclusive lock, but in
26fact it won't be written to. Just in case there's a major disaster (e.g.
27overwriting some other file descriptor with the value of this one), open it
28with append.
29
30Argument: the id of the message
31Returns: TRUE if file successfully opened and locked
32
33Side effect: deliver_datafile is set to the fd of the open file.
34*/
35
36BOOL
37spool_open_datafile(uschar *id)
38{
39int i;
40struct stat statbuf;
41flock_t lock_data;
42uschar spoolname[256];
43
44/* If split_spool_directory is set, first look for the file in the appropriate
45sub-directory of the input directory. If it is not found there, try the input
46directory itself, to pick up leftovers from before the splitting. If split_
47spool_directory is not set, first look in the main input directory. If it is
48not found there, try the split sub-directory, in case it is left over from a
49splitting state. */
50
51for (i = 0; i < 2; i++)
52 {
53 int save_errno;
54 message_subdir[0] = (split_spool_directory == (i == 0))? id[5] : 0;
55 sprintf(CS spoolname, "%s/input/%s/%s-D", spool_directory, message_subdir, id);
56 deliver_datafile = Uopen(spoolname, O_RDWR | O_APPEND, 0);
57 if (deliver_datafile >= 0) break;
58 save_errno = errno;
59 if (errno == ENOENT)
60 {
61 if (i == 0) continue;
62 if (!queue_running)
63 log_write(0, LOG_MAIN, "Spool file %s-D not found", id);
64 }
65 else log_write(0, LOG_MAIN, "Spool error for %s: %s", spoolname,
66 strerror(errno));
67 errno = save_errno;
68 return FALSE;
69 }
70
71/* File is open and message_subdir is set. Set the close-on-exec flag, and lock
72the file. We lock only the first line of the file (containing the message ID)
73because this apparently is needed for running Exim under Cygwin. If the entire
74file is locked in one process, a sub-process cannot access it, even when passed
75an open file descriptor (at least, I think that's the Cygwin story). On real
76Unix systems it doesn't make any difference as long as Exim is consistent in
77what it locks. */
78
79fcntl(deliver_datafile, F_SETFD, fcntl(deliver_datafile, F_GETFD) |
80 FD_CLOEXEC);
81
82lock_data.l_type = F_WRLCK;
83lock_data.l_whence = SEEK_SET;
84lock_data.l_start = 0;
85lock_data.l_len = SPOOL_DATA_START_OFFSET;
86
87if (fcntl(deliver_datafile, F_SETLK, &lock_data) < 0)
88 {
89 log_write(L_skip_delivery,
90 LOG_MAIN,
91 "Spool file is locked (another process is handling this message)");
92 close(deliver_datafile);
93 deliver_datafile = -1;
94 errno = 0;
95 return FALSE;
96 }
97
98/* Get the size of the data; don't include the leading filename line
99in the count, but add one for the newline before the data. */
100
101if (fstat(deliver_datafile, &statbuf) == 0)
102 {
103 message_body_size = statbuf.st_size - SPOOL_DATA_START_OFFSET;
104 message_size = message_body_size + 1;
105 }
106
107return TRUE;
108}
109#endif /* COMPILE_UTILITY */
110
111
112
113/*************************************************
114* Read non-recipients tree from spool file *
115*************************************************/
116
117/* The tree of non-recipients is written to the spool file in a form that
118makes it easy to read back into a tree. The format is as follows:
119
120 . Each node is preceded by two letter(Y/N) indicating whether it has left
121 or right children. There's one space after the two flags, before the name.
122
123 . The left subtree (if any) then follows, then the right subtree (if any).
124
125This function is entered with the next input line in the buffer. Note we must
126save the right flag before recursing with the same buffer.
127
128Once the tree is read, we re-construct the balance fields by scanning the tree.
129I forgot to write them out originally, and the compatible fix is to do it this
130way. This initial local recursing function does the necessary.
131
132Arguments:
133 node tree node
134
135Returns: maximum depth below the node, including the node itself
136*/
137
138static int
139count_below(tree_node *node)
140{
141int nleft, nright;
142if (node == NULL) return 0;
143nleft = count_below(node->left);
144nright = count_below(node->right);
145node->balance = (nleft > nright)? 1 : ((nright > nleft)? 2 : 0);
146return 1 + ((nleft > nright)? nleft : nright);
147}
148
149/* This is the real function...
150
151Arguments:
152 connect pointer to the root of the tree
153 f FILE to read data from
154 buffer contains next input line; further lines read into it
155 buffer_size size of the buffer
156
157Returns: FALSE on format error
158*/
159
160static BOOL
161read_nonrecipients_tree(tree_node **connect, FILE *f, uschar *buffer,
162 int buffer_size)
163{
164tree_node *node;
165int n = Ustrlen(buffer);
166BOOL right = buffer[1] == 'Y';
167
168if (n < 5) return FALSE; /* malformed line */
169buffer[n-1] = 0; /* Remove \n */
170node = store_get(sizeof(tree_node) + n - 3);
171*connect = node;
172Ustrcpy(node->name, buffer + 3);
173node->data.ptr = NULL;
174
175if (buffer[0] == 'Y')
176 {
177 if (Ufgets(buffer, buffer_size, f) == NULL ||
178 !read_nonrecipients_tree(&node->left, f, buffer, buffer_size))
179 return FALSE;
180 }
181else node->left = NULL;
182
183if (right)
184 {
185 if (Ufgets(buffer, buffer_size, f) == NULL ||
186 !read_nonrecipients_tree(&node->right, f, buffer, buffer_size))
187 return FALSE;
188 }
189else node->right = NULL;
190
191(void) count_below(*connect);
192return TRUE;
193}
194
195
196
197
198/*************************************************
199* Read spool header file *
200*************************************************/
201
202/* This function reads a spool header file and places the data into the
203appropriate global variables. The header portion is always read, but header
204structures are built only if read_headers is set true. It isn't, for example,
205while generating -bp output.
206
207It may be possible for blocks of nulls (binary zeroes) to get written on the
208end of a file if there is a system crash during writing. It was observed on an
209earlier version of Exim that omitted to fsync() the files - this is thought to
210have been the cause of that incident, but in any case, this code must be robust
211against such an event, and if such a file is encountered, it must be treated as
212malformed.
213
214Arguments:
215 name name of the header file, including the -H
216 read_headers TRUE if in-store header structures are to be built
217 subdir_set TRUE is message_subdir is already set
218
219Returns: spool_read_OK success
220 spool_read_notopen open failed
221 spool_read_enverror error in the envelope portion
222 spool_read_hdrdrror error in the header portion
223*/
224
225int
226spool_read_header(uschar *name, BOOL read_headers, BOOL subdir_set)
227{
228FILE *f = NULL;
229int n;
230int rcount = 0;
231long int uid, gid;
232BOOL inheader = FALSE;
1e70f85b 233uschar *p;
059ec3d9
PH
234
235/* Reset all the global variables to their default values. However, there is
236one exception. DO NOT change the default value of dont_deliver, because it may
237be forced by an external setting. */
238
239for (n = 0; n < ACL_C_MAX + ACL_M_MAX; n++) acl_var[n] = NULL;
240
241authenticated_id = NULL;
242authenticated_sender = NULL;
243allow_unqualified_recipient = FALSE;
244allow_unqualified_sender = FALSE;
245body_linecount = 0;
246body_zerocount = 0;
247deliver_firsttime = FALSE;
248deliver_freeze = FALSE;
249deliver_frozen_at = 0;
250deliver_manual_thaw = FALSE;
251/* dont_deliver must NOT be reset */
252header_list = header_last = NULL;
b08b24c8 253host_lookup_deferred = FALSE;
059ec3d9
PH
254host_lookup_failed = FALSE;
255interface_address = NULL;
256interface_port = 0;
257local_error_message = FALSE;
258local_scan_data = NULL;
259message_linecount = 0;
260received_protocol = NULL;
261received_count = 0;
262recipients_list = NULL;
263sender_address = NULL;
264sender_fullhost = NULL;
265sender_helo_name = NULL;
266sender_host_address = NULL;
267sender_host_name = NULL;
268sender_host_port = 0;
269sender_host_authenticated = NULL;
270sender_ident = NULL;
271sender_local = FALSE;
272sender_set_untrusted = FALSE;
1f5b4c3d 273smtp_active_hostname = primary_hostname;
059ec3d9
PH
274tree_nonrecipients = NULL;
275
8523533c
TK
276#ifdef EXPERIMENTAL_BRIGHTMAIL
277bmi_run = 0;
278bmi_verdicts = NULL;
279#endif
280
fb2274d4
TK
281#ifdef EXPERIMENTAL_DOMAINKEYS
282dk_do_verify = 0;
283#endif
284
059ec3d9
PH
285#ifdef SUPPORT_TLS
286tls_certificate_verified = FALSE;
287tls_cipher = NULL;
288tls_peerdn = NULL;
289#endif
290
8523533c 291#ifdef WITH_CONTENT_SCAN
8523533c
TK
292spam_score_int = NULL;
293#endif
294
059ec3d9
PH
295/* Generate the full name and open the file. If message_subdir is already
296set, just look in the given directory. Otherwise, look in both the split
297and unsplit directories, as for the data file above. */
298
299for (n = 0; n < 2; n++)
300 {
301 if (!subdir_set)
302 message_subdir[0] = (split_spool_directory == (n == 0))? name[5] : 0;
303 sprintf(CS big_buffer, "%s/input/%s/%s", spool_directory, message_subdir,
304 name);
305 f = Ufopen(big_buffer, "rb");
306 if (f != NULL) break;
307 if (n != 0 || subdir_set || errno != ENOENT) return spool_read_notopen;
308 }
309
310errno = 0;
311
312#ifndef COMPILE_UTILITY
313DEBUG(D_deliver) debug_printf("reading spool file %s\n", name);
314#endif /* COMPILE_UTILITY */
315
316/* The first line of a spool file contains the message id followed by -H (i.e.
317the file name), in order to make the file self-identifying. */
318
319if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
320if (Ustrlen(big_buffer) != MESSAGE_ID_LENGTH + 3 ||
321 Ustrncmp(big_buffer, name, MESSAGE_ID_LENGTH + 2) != 0)
322 goto SPOOL_FORMAT_ERROR;
323
324/* The next three lines in the header file are in a fixed format. The first
325contains the login, uid, and gid of the user who caused the file to be written.
326The second contains the mail address of the message's sender, enclosed in <>.
327The third contains the time the message was received, and the number of warning
328messages for delivery delays that have been sent. */
329
330if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
331
1e70f85b
PH
332p = big_buffer + Ustrlen(big_buffer);
333while (p > big_buffer && isspace(p[-1])) p--;
334*p = 0;
335if (!isdigit(p[-1])) goto SPOOL_FORMAT_ERROR;
336while (p > big_buffer && isdigit(p[-1])) p--;
337gid = Uatoi(p);
338if (p <= big_buffer || *(--p) != ' ') goto SPOOL_FORMAT_ERROR;
339*p = 0;
340if (!isdigit(p[-1])) goto SPOOL_FORMAT_ERROR;
341while (p > big_buffer && isdigit(p[-1])) p--;
342uid = Uatoi(p);
343if (p <= big_buffer || *(--p) != ' ') goto SPOOL_FORMAT_ERROR;
344*p = 0;
8e669ac1 345
1e70f85b 346originator_login = string_copy(big_buffer);
059ec3d9
PH
347originator_uid = (uid_t)uid;
348originator_gid = (gid_t)gid;
349
350if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
351n = Ustrlen(big_buffer);
352if (n < 3 || big_buffer[0] != '<' || big_buffer[n-2] != '>')
353 goto SPOOL_FORMAT_ERROR;
354
355sender_address = store_get(n-2);
356Ustrncpy(sender_address, big_buffer+1, n-3);
357sender_address[n-3] = 0;
358
359if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
360if (sscanf(CS big_buffer, "%d %d", &received_time, &warning_count) != 2)
361 goto SPOOL_FORMAT_ERROR;
362
363message_age = time(NULL) - received_time;
364
365#ifndef COMPILE_UTILITY
366DEBUG(D_deliver) debug_printf("user=%s uid=%ld gid=%ld sender=%s\n",
367 originator_login, (long int)originator_uid, (long int)originator_gid,
368 sender_address);
369#endif /* COMPILE_UTILITY */
370
371/* Now there may be a number of optional lines, each starting with "-".
372If you add a new setting here, make sure you set the default above. */
373
374for (;;)
375 {
376 if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
377 if (big_buffer[0] != '-') break;
378
379 big_buffer[Ustrlen(big_buffer) - 1] = 0;
380 if (Ustrncmp(big_buffer, "-acl ", 5) == 0)
381 {
382 int index, count;
383 if (sscanf(CS big_buffer + 5, "%d %d", &index, &count) != 2)
384 goto SPOOL_FORMAT_ERROR;
385 /* Ignore if index too big - might be if a later release with more
386 variables built this spool file. */
387 if (index < ACL_C_MAX + ACL_M_MAX)
388 {
389 acl_var[index] = store_get(count + 1);
390 if (fread(acl_var[index], 1, count+1, f) < count) goto SPOOL_READ_ERROR;
391 acl_var[index][count] = 0;
392 }
393 }
394 else if (Ustrcmp(big_buffer, "-local") == 0) sender_local = TRUE;
395 else if (Ustrcmp(big_buffer, "-localerror") == 0)
396 local_error_message = TRUE;
397 else if (Ustrncmp(big_buffer, "-local_scan ", 12) == 0)
398 local_scan_data = string_copy(big_buffer + 12);
8e669ac1 399#ifdef WITH_CONTENT_SCAN
8523533c 400 else if (Ustrncmp(big_buffer, "-spam_score_int ", 16) == 0)
8e669ac1 401 spam_score_int = string_copy(big_buffer + 16);
8523533c
TK
402#endif
403#ifdef EXPERIMENTAL_BRIGHTMAIL
404 else if (Ustrncmp(big_buffer, "-bmi_verdicts ", 14) == 0)
405 bmi_verdicts = string_copy(big_buffer + 14);
406#endif
b08b24c8
PH
407 else if (Ustrcmp(big_buffer, "-host_lookup_deferred") == 0)
408 host_lookup_deferred = TRUE;
059ec3d9
PH
409 else if (Ustrcmp(big_buffer, "-host_lookup_failed") == 0)
410 host_lookup_failed = TRUE;
411 else if (Ustrncmp(big_buffer, "-body_linecount", 15) == 0)
412 body_linecount = Uatoi(big_buffer + 15);
413 else if (Ustrncmp(big_buffer, "-body_zerocount", 15) == 0)
414 body_zerocount = Uatoi(big_buffer + 15);
415 else if (Ustrncmp(big_buffer, "-frozen", 7) == 0)
416 {
417 deliver_freeze = TRUE;
418 deliver_frozen_at = Uatoi(big_buffer + 7);
419 }
420 else if (Ustrcmp(big_buffer, "-allow_unqualified_recipient") == 0)
421 allow_unqualified_recipient = TRUE;
422 else if (Ustrcmp(big_buffer, "-allow_unqualified_sender") == 0)
423 allow_unqualified_sender = TRUE;
424 else if (Ustrcmp(big_buffer, "-deliver_firsttime") == 0)
425 deliver_firsttime = TRUE;
426 else if (Ustrcmp(big_buffer, "-manual_thaw") == 0)
427 deliver_manual_thaw = TRUE;
428 else if (Ustrncmp(big_buffer, "-auth_id", 8) == 0)
429 authenticated_id = string_copy(big_buffer + 9);
430 else if (Ustrncmp(big_buffer, "-auth_sender", 12) == 0)
431 authenticated_sender = string_copy(big_buffer + 13);
432 else if (Ustrncmp(big_buffer, "-sender_set_untrusted", 21) == 0)
433 sender_set_untrusted = TRUE;
434
435 #ifdef SUPPORT_TLS
436 else if (Ustrncmp(big_buffer, "-tls_certificate_verified", 25) == 0)
437 tls_certificate_verified = TRUE;
438 else if (Ustrncmp(big_buffer, "-tls_cipher", 11) == 0)
439 tls_cipher = string_copy(big_buffer + 12);
440 else if (Ustrncmp(big_buffer, "-tls_peerdn", 11) == 0)
441 tls_peerdn = string_copy(big_buffer + 12);
442 #endif
443
444 /* We now record the port number after the address, separated by a
445 dot. For compatibility during upgrading, do nothing if there
446 isn't a value (it gets left at zero). */
447
448 else if (Ustrncmp(big_buffer, "-host_address", 13) == 0)
449 {
450 sender_host_port = host_extract_port(big_buffer + 14);
451 sender_host_address = string_copy(big_buffer + 14);
452 }
453
454 else if (Ustrncmp(big_buffer, "-interface_address", 18) == 0)
455 {
456 interface_port = host_extract_port(big_buffer + 19);
457 interface_address = string_copy(big_buffer + 19);
458 }
459
1f5b4c3d 460 else if (Ustrncmp(big_buffer, "-active_hostname", 16) == 0)
8e669ac1 461 smtp_active_hostname = string_copy(big_buffer + 17);
059ec3d9
PH
462 else if (Ustrncmp(big_buffer, "-host_auth", 10) == 0)
463 sender_host_authenticated = string_copy(big_buffer + 11);
464 else if (Ustrncmp(big_buffer, "-host_name", 10) == 0)
465 sender_host_name = string_copy(big_buffer + 11);
466 else if (Ustrncmp(big_buffer, "-helo_name", 10) == 0)
467 sender_helo_name = string_copy(big_buffer + 11);
468 else if (Ustrncmp(big_buffer, "-ident", 6) == 0)
469 sender_ident = string_copy(big_buffer + 7);
470 else if (Ustrncmp(big_buffer, "-received_protocol", 18) == 0)
471 received_protocol = string_copy(big_buffer + 19);
472 else if (Ustrncmp(big_buffer, "-N", 2) == 0)
473 dont_deliver = TRUE;
474
475 /* To allow new versions of Exim that add additional flags to interwork
476 with older versions that do not understand them, just ignore any flagged
477 lines that we don't recognize. Otherwise it wouldn't be possible to back
478 off a new version that left new-style flags written on the spool. That's
479 why the following line is commented out. */
480
481 /* else goto SPOOL_FORMAT_ERROR; */
482 }
483
484/* Build sender_fullhost if required */
485
486#ifndef COMPILE_UTILITY
487host_build_sender_fullhost();
488#endif /* COMPILE_UTILITY */
489
490#ifndef COMPILE_UTILITY
491DEBUG(D_deliver)
492 debug_printf("sender_local=%d ident=%s\n", sender_local,
493 (sender_ident == NULL)? US"unset" : sender_ident);
494#endif /* COMPILE_UTILITY */
495
496/* We now have the tree of addresses NOT to deliver to, or a line
497containing "XX", indicating no tree. */
498
499if (Ustrncmp(big_buffer, "XX\n", 3) != 0 &&
500 !read_nonrecipients_tree(&tree_nonrecipients, f, big_buffer, big_buffer_size))
501 goto SPOOL_FORMAT_ERROR;
502
503#ifndef COMPILE_UTILITY
504DEBUG(D_deliver)
505 {
506 debug_printf("Non-recipients:\n");
507 debug_print_tree(tree_nonrecipients);
508 }
509#endif /* COMPILE_UTILITY */
510
511/* After reading the tree, the next line has not yet been read into the
512buffer. It contains the count of recipients which follow on separate lines. */
513
514if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
515if (sscanf(CS big_buffer, "%d", &rcount) != 1) goto SPOOL_FORMAT_ERROR;
516
517#ifndef COMPILE_UTILITY
518DEBUG(D_deliver) debug_printf("recipients_count=%d\n", rcount);
519#endif /* COMPILE_UTILITY */
520
521recipients_list_max = rcount;
522recipients_list = store_get(rcount * sizeof(recipient_item));
523
524for (recipients_count = 0; recipients_count < rcount; recipients_count++)
525 {
526 int nn;
527 int pno = -1;
528 uschar *errors_to = NULL;
529 uschar *p;
530
531 if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
532 nn = Ustrlen(big_buffer);
533 if (nn < 2) goto SPOOL_FORMAT_ERROR;
534
535 /* Remove the newline; this terminates the address if there is no additional
536 data on the line. */
537
538 p = big_buffer + nn - 1;
539 *p-- = 0;
540
541 /* Look back from the end of the line for digits and special terminators.
542 Since an address must end with a domain, we can tell that extra data is
543 present by the presence of the terminator, which is always some character
544 that cannot exist in a domain. (If I'd thought of the need for additional
545 data early on, I'd have put it at the start, with the address at the end. As
546 it is, we have to operate backwards. Addresses are permitted to contain
547 spaces, you see.)
548
549 This code has to cope with various versions of this data that have evolved
550 over time. In all cases, the line might just contain an address, with no
551 additional data. Otherwise, the possibilities are as follows:
552
553 Exim 3 type: <address><space><digits>,<digits>,<digits>
554
555 The second set of digits is the parent number for one_time addresses. The
556 other values were remnants of earlier experiments that were abandoned.
557
558 Exim 4 first type: <address><space><digits>
559
560 The digits are the parent number for one_time addresses.
561
562 Exim 4 new type: <address><space><data>#<type bits>
563
564 The type bits indicate what the contents of the data are.
565
566 Bit 01 indicates that, reading from right to left, the data
567 ends with <errors_to address><space><len>,<pno> where pno is
568 the parent number for one_time addresses, and len is the length
569 of the errors_to address (zero meaning none).
570 */
571
572 while (isdigit(*p)) p--;
573
574 /* Handle Exim 3 spool files */
575
576 if (*p == ',')
577 {
578 int dummy;
579 while (isdigit(*(--p)) || *p == ',');
580 if (*p == ' ')
581 {
582 *p++ = 0;
583 sscanf(CS p, "%d,%d", &dummy, &pno);
584 }
585 }
586
587 /* Handle early Exim 4 spool files */
588
589 else if (*p == ' ')
590 {
591 *p++ = 0;
592 sscanf(CS p, "%d", &pno);
593 }
594
595 /* Handle current format Exim 4 spool files */
596
597 else if (*p == '#')
598 {
599 int flags;
600 sscanf(CS p+1, "%d", &flags);
601
602 if ((flags & 0x01) != 0) /* one_time data exists */
603 {
604 int len;
605 while (isdigit(*(--p)) || *p == ',' || *p == '-');
606 sscanf(CS p+1, "%d,%d", &len, &pno);
607 *p = 0;
608 if (len > 0)
609 {
610 p -= len;
611 errors_to = string_copy(p);
612 }
613 }
614
615 *(--p) = 0; /* Terminate address */
616 }
617
618 recipients_list[recipients_count].address = string_copy(big_buffer);
619 recipients_list[recipients_count].pno = pno;
620 recipients_list[recipients_count].errors_to = errors_to;
621 }
622
623/* The remainder of the spool header file contains the headers for the message,
624separated off from the previous data by a blank line. Each header is preceded
625by a count of its length and either a certain letter (for various identified
626headers), space (for a miscellaneous live header) or an asterisk (for a header
627that has been rewritten). Count the Received: headers. We read the headers
628always, in order to check on the format of the file, but only create a header
629list if requested to do so. */
630
631inheader = TRUE;
632if (Ufgets(big_buffer, big_buffer_size, f) == NULL) goto SPOOL_READ_ERROR;
633if (big_buffer[0] != '\n') goto SPOOL_FORMAT_ERROR;
634
635while ((n = fgetc(f)) != EOF)
636 {
637 header_line *h;
638 uschar flag[4];
639 int i;
640
641 if (!isdigit(n)) goto SPOOL_FORMAT_ERROR;
642 ungetc(n, f);
643 fscanf(f, "%d%c ", &n, flag);
644 if (flag[0] != '*') message_size += n; /* Omit non-transmitted headers */
645
646 if (read_headers)
647 {
648 h = store_get(sizeof(header_line));
649 h->next = NULL;
650 h->type = flag[0];
651 h->slen = n;
652 h->text = store_get(n+1);
653
654 if (h->type == htype_received) received_count++;
655
656 if (header_list == NULL) header_list = h;
657 else header_last->next = h;
658 header_last = h;
659
660 for (i = 0; i < n; i++)
661 {
662 int c = fgetc(f);
663 if (c == 0 || c == EOF) goto SPOOL_FORMAT_ERROR;
664 if (c == '\n' && h->type != htype_old) message_linecount++;
665 h->text[i] = c;
666 }
667 h->text[i] = 0;
668 }
669
670 /* Not requiring header data, just skip through the bytes */
671
672 else for (i = 0; i < n; i++)
673 {
674 int c = fgetc(f);
675 if (c == 0 || c == EOF) goto SPOOL_FORMAT_ERROR;
676 }
677 }
678
679/* We have successfully read the data in the header file. Update the message
680line count by adding the body linecount to the header linecount. Close the file
681and give a positive response. */
682
683#ifndef COMPILE_UTILITY
684DEBUG(D_deliver) debug_printf("body_linecount=%d message_linecount=%d\n",
685 body_linecount, message_linecount);
686#endif /* COMPILE_UTILITY */
687
688message_linecount += body_linecount;
689
690fclose(f);
691return spool_read_OK;
692
693
694/* There was an error reading the spool or there was missing data,
695or there was a format error. A "read error" with no errno means an
696unexpected EOF, which we treat as a format error. */
697
698SPOOL_READ_ERROR:
699if (errno != 0)
700 {
701 n = errno;
702
703 #ifndef COMPILE_UTILITY
704 DEBUG(D_any) debug_printf("Error while reading spool file %s\n", name);
705 #endif /* COMPILE_UTILITY */
706
707 fclose(f);
708 errno = n;
709 return inheader? spool_read_hdrerror : spool_read_enverror;
710 }
711
712SPOOL_FORMAT_ERROR:
713
714#ifndef COMPILE_UTILITY
715DEBUG(D_any) debug_printf("Format error in spool file %s\n", name);
716#endif /* COMPILE_UTILITY */
717
718fclose(f);
719errno = ERRNO_SPOOLFORMAT;
720return inheader? spool_read_hdrerror : spool_read_enverror;
721}
722
723/* End of spool_in.c */