[gmime: 13/24] Fix out-of-bounds read in domain_literal_parse()



commit c519b6845ad4837d69c2a9b5511f15bbb4079fc7
Author: Jakub Wilk <jwilk jwilk net>
Date:   Sun Jul 30 23:44:59 2017 +0200

    Fix out-of-bounds read in domain_literal_parse()
    
    If a malformed address ended right after dtext, the original code would
    read past the terminating null byte.

 gmime/internet-address.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/gmime/internet-address.c b/gmime/internet-address.c
index f5c3c7f..13d2aeb 100644
--- a/gmime/internet-address.c
+++ b/gmime/internet-address.c
@@ -1589,7 +1589,7 @@ domain_literal_parse (GString *str, const char **in)
        skip_lwsp (&inptr);
        
        do {
-               while (is_dtext (*inptr))
+               while (*inptr && is_dtext (*inptr))
                        g_string_append_c (str, *inptr++);
                
                skip_lwsp (&inptr);


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]