Affected by GO-2022-0306 and 2 other vulnerabilities

GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

internal/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/foxcpp/maddy

Links

Open Source Insights

README ¶

maddy source tree

Main maddy code base lives here. No packages are intended to be used in third-party software hence API is not stable.

Subdirectories are organised as follows:

/
  auxiliary libraries
endpoint/
  modules - protocol listeners (e.g. SMTP server, etc)
target/
  modules - final delivery targets (including outbound delivery, such as
  smtp_downstream, remote)
auth/
  modules - authentication providers
check/
  modules - message checkers (module.Check)
modify/
  modules - message modifiers (module.Modifier)
storage/
  modules - local messages storage implementations (module.Storage)

Directories ¶

Path	Synopsis
address Package address provides utilities for parsing and validation of RFC 2821 addresses.	Package address provides utilities for parsing and validation of RFC 2821 addresses.
auth
dovecot_sasl
external
pam
pass_table
plain_separate
shadow shadow package implements utilities for parsing and using shadow password database on Unix systems.	shadow package implements utilities for parsing and using shadow password database on Unix systems.
buffer The buffer package provides utilities for temporary storage (buffering) of large blobs.	The buffer package provides utilities for temporary storage (buffering) of large blobs.
check
command
dkim
dns
dnsbl
milter
requiretls
spf
config
lexer
module Package modconfig provides matchers for config.Map that query modules registry and parse inline module definitions.	Package modconfig provides matchers for config.Map that query modules registry and parse inline module definitions.
dmarc
dns Package dns defines interfaces used by maddy modules to perform DNS lookups.	Package dns defines interfaces used by maddy modules to perform DNS lookups.
dsn Package dsn contains the utilities used for dsn message (DSN) generation.	Package dsn contains the utilities used for dsn message (DSN) generation.
endpoint
dovecot_sasld
imap
smtp
exterrors Package errors defines error-handling and primitives used across maddy, notably to pass additional error information across module boundaries.	Package errors defines error-handling and primitives used across maddy, notably to pass additional error information across module boundaries.
future
hooks
limits Package limit provides a module object that can be used to restrict the concurrency and rate of the messages flow globally or on per-source, per-destination basis.	Package limit provides a module object that can be used to restrict the concurrency and rate of the messages flow globally or on per-source, per-destination basis.
limiters Package limiters provides a set of wrappers intended to restrict the amount of resources consumed by the server.	Package limiters provides a set of wrappers intended to restrict the amount of resources consumed by the server.
log Package log implements a minimalistic logging library.	Package log implements a minimalistic logging library.
modify
dkim
module Package module contains modules registry and interfaces implemented by modules.	Package module contains modules registry and interfaces implemented by modules.
msgpipeline
smtpconn The package smtpconn contains the code shared between smtp_downstream and remote modules.	The package smtpconn contains the code shared between smtp_downstream and remote modules.
storage
imapsql Package imapsql implements SQL-based storage module using go-imap-sql library (github.com/foxcpp/go-imap-sql).	Package imapsql implements SQL-based storage module using go-imap-sql library (github.com/foxcpp/go-imap-sql).
table
target
queue Package queue implements module which keeps messages on disk and tries delivery to the configured target (usually remote) multiple times until all recipients are succeeded.	Package queue implements module which keeps messages on disk and tries delivery to the configured target (usually remote) multiple times until all recipients are succeeded.
remote Package remote implements module which does outgoing message delivery using servers discovered using DNS MX records.	Package remote implements module which does outgoing message delivery using servers discovered using DNS MX records.
smtp_downstream Package smtp_downstream provides smtp_downstream module that implements transparent forwarding or messages to configured list of SMTP servers.	Package smtp_downstream provides smtp_downstream module that implements transparent forwarding or messages to configured list of SMTP servers.
testutils
updatepipe Package updatepipe implements utilities for serialization and transport of IMAP update objects between processes and machines.	Package updatepipe implements utilities for serialization and transport of IMAP update objects between processes and machines.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL