CVE-2025-7962

@@ -0,0 +1,87 @@
+/*
+ * Copyright (c) 2025 Oracle and/or its affiliates. All rights reserved.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the Eclipse Public License v. 2.0, which is available at
+ * http://www.eclipse.org/legal/epl-2.0.
+ *
+ * This Source Code may also be made available under the following Secondary
+ * Licenses when the conditions for such availability set forth in the
+ * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+ * version 2 with the GNU Classpath Exception, which is available at
+ * https://www.gnu.org/software/classpath/license.html.
+ *
+ * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+ */
+
+package org.eclipse.angus.mail.test;
+
+import java.io.BufferedReader;
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.io.PrintWriter;
+import java.net.ServerSocket;
+import java.net.Socket;
+
+public class FakeSMTPServer {
+
+    private volatile boolean running = true;
+
+    public void start(int port) {
+        try (ServerSocket serverSocket = new ServerSocket(port)) {
+            System.out.println("Fake SMTP server is running on port " + port);
+
+            while (running) {
+                // 等待客户端连接
+                Socket clientSocket = serverSocket.accept();
+                System.out.println("New client connected: " + clientSocket.getInetAddress());
+
+                // 获取客户端输入流，用于接收 SMTP 请求
+                BufferedReader reader = new BufferedReader(new InputStreamReader(clientSocket.getInputStream()));
+                PrintWriter writer = new PrintWriter(clientSocket.getOutputStream(), true);
+
+                // 发送欢迎消息，模拟服务器响应
+                writer.println("220 Fake SMTP Server Ready");
+
+                // 读取客户端的输入并打印
+                String line;
+                while ((line = reader.readLine()) != null) {
+                    // 打印收到的每一行 SMTP 报文
+                    System.out.println("Received: " + line);
+
+                    // 模拟 SMTP 交互
+                    if (line.startsWith("HELO") || line.startsWith("EHLO")) {
+                        writer.println("250 Hello " + clientSocket.getInetAddress().getHostName());
+                    } else if (line.startsWith("MAIL FROM")) {
+                        writer.println("250 OK");
+                    } else if (line.startsWith("RCPT TO")) {
+                        writer.println("250 OK");
+                    } else if (line.equals("DATA")) {
+                        writer.println("354 Start mail input; end with <CRLF>.<CRLF>");
+                    } else if (line.equals(".")) {
+                        writer.println("250 OK: Message received");
+                    } else if (line.equals("QUIT")) {
+                        writer.println("221 Bye");
+                        break;
+                    }
+
+                    // 如果客户端发送了 "QUIT"，则退出当前会话
+                    if (line.equals("QUIT")) {
+                        break;
+                    }
+                }
+
+                // 关闭当前客户端连接
+                clientSocket.close();
+                System.out.println("Client disconnected");
+            }
+        } catch (IOException e) {
+            e.printStackTrace();
+        }
+    }
+
+    public void stop() {
+        running = false;
+        System.out.println("Fake SMTP server is stopping...");
+    }
+}
\ No newline at end of file

@@ -0,0 +1,108 @@
+/*
+ * Copyright (c) 2025 Oracle and/or its affiliates. All rights reserved.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the Eclipse Public License v. 2.0, which is available at
+ * http://www.eclipse.org/legal/epl-2.0.
+ *
+ * This Source Code may also be made available under the following Secondary
+ * Licenses when the conditions for such availability set forth in the
+ * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+ * version 2 with the GNU Classpath Exception, which is available at
+ * https://www.gnu.org/software/classpath/license.html.
+ *
+ * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+ */
+
+package org.eclipse.angus.mail.test;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.fail;
+
+import java.io.IOException;
+import java.net.InetSocketAddress;
+import java.net.Socket;
+import java.net.UnknownHostException;
+import java.util.Properties;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+import java.util.concurrent.TimeUnit;
+
+import jakarta.mail.Authenticator;
+import jakarta.mail.MessagingException;
+import jakarta.mail.PasswordAuthentication;
+import jakarta.mail.Session;
+import jakarta.mail.Transport;
+import jakarta.mail.internet.InternetAddress;
+import jakarta.mail.internet.MimeMessage;
+
+import org.eclipse.angus.mail.util.ASCIIUtility;
+import org.junit.Test;
+
+
+public class Issue299Test {
+
+    static final int PORT = 18465;
+    static final String USER = "xxxunj******@163.com";
+    static final String PASSWD = "EY**************";
+    static final String toMail = "甲申申甶甴甸电甹甸甸畀畱畱瘮畣畯畭甾瘍瘊畄畁畔畁瘍瘊畓畵畢番略畣畴町畐畗畎畅畄瘍瘊瘍瘊畉瘠界畏畖畅瘠留畏畕瘡瘍瘊瘮瘍瘊畑畕畉畔瘍瘊@qq.com";
+    static String TEXT = "Hello world";
+    static String SUBJECT = "Test";
+
+    static Properties properties = new Properties();
+    static Authenticator authenticator = null;
+
+    public static void initProp(){
+        properties.setProperty("mail.host","127.0.0.1");
+        properties.put("mail.debug", "true");
+        properties.setProperty("mail.transport.protocol","smtp");
+        properties.setProperty("mail.smtp.auth","true");
+        properties.setProperty("mail.smtp.timeout", "1000");
+        properties.setProperty("mail.smtp.port", Integer.toString(PORT));
+        authenticator = new Authenticator() {
+            @Override
+            protected PasswordAuthentication getPasswordAuthentication() {
+                return new PasswordAuthentication(USER, PASSWD);
+            }
+        };
+    }
+    public static Session getSession(){
+        return Session.getInstance(properties, authenticator);
+    }
+
+    @Test
+    public void test() throws Exception {
+        FakeSMTPServer server =  new FakeSMTPServer();
+        ExecutorService service = Executors.newFixedThreadPool(1);
+        try {
+            service.execute(() -> {
+                try {
+                    server.start(PORT);
+                    Thread.sleep(1000);
+                } catch (Exception e) {
+                    e.printStackTrace();
+                }
+            });
+    
+            initProp();
+    
+            Session session = getSession();
+            MimeMessage msg = new MimeMessage(session);
+            msg.setRecipient(MimeMessage.RecipientType.TO, new InternetAddress(toMail));
+            msg.setSubject(SUBJECT);
+            msg.setContent(TEXT, "text/html;charset=utf-8");
+            msg.saveChanges();
+            Transport.send(msg);
+            fail("It is expected an IllegalArgumentException because there are illegal characters in the command");
+        } catch (Exception e) {
+            if (e.getCause() == null || e.getCause().getClass() != IllegalArgumentException.class) {
+                fail("It is expected an IllegalArgumentException because there are illegal characters in the command. Exception was: " + e);
+            }
+        } finally {
+            server.stop();
+            service.shutdown();
+            service.awaitTermination(5, TimeUnit.SECONDS);
+        }
+    }
+
+}
\ No newline at end of file

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 1997, 2023 Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 1997, 2025 Oracle and/or its affiliates. All rights reserved.
  *
  * This program and the accompanying materials are made available under the
  * terms of the Eclipse Public License v. 2.0, which is available at
@@ -2457,14 +2457,25 @@ private void sendCommand(byte[] cmdBytes) throws MessagingException {
         //logger.fine("SENT: " + new String(cmdBytes, 0));
 
         try {
+            validateCommand(cmdBytes);
             serverOutput.write(cmdBytes);
             serverOutput.write(CRLF);
             serverOutput.flush();
-        } catch (IOException ex) {
+        } catch (IOException | RuntimeException ex) {
             throw new MessagingException("Can't send command to SMTP host", ex);
         }
     }
 
+    private void validateCommand(byte[] cmdBytes) throws MessagingException {
+        final byte CR = '\r';
+        final byte LF = '\n';
+        for (byte b : cmdBytes) {
+            if (b == LF || b == CR) {
+                throw new IllegalArgumentException("Command contains illegal character: " + String.format("0x%02x",b));
+            }
+        }
+    }
+
     /**
      * Reads server reponse returning the <code>returnCode</code>
      * as the number.  Returns -1 on failure. Sets