From: Antonio Radici <antonio@dyne.org>
Date: Sat, 1 Jan 2011 12:57:46 +0000 (+0000)
Subject: upstream/578087-header-strchr.patch: prevent from segfaulting on malformed messages... 
X-Git-Tag: debian/1.5.21-2~11
X-Git-Url: https://git.llucax.com/software/mutt-debian.git/commitdiff_plain/461a22291d690a971301414c8e9e28a3d563e107?hp=c71aaa5c83036e5b1685f66887d51832b6fb49f7

upstream/578087-header-strchr.patch: prevent from segfaulting on malformed messages (Closes: 578087)
---

diff --git a/debian/changelog b/debian/changelog
index 36502cf..1af3264 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,14 @@
 mutt (1.5.21-2) UNRELEASED; urgency=low
 
+  [ Christoph Berg ]
   * debian/patches: features/imap_fast_trash: Support purging of messages.
 
- -- Christoph Berg <myon@debian.org>  Wed, 06 Oct 2010 14:13:53 +0200
+  [ Antonio Radici ]
+  * debian/patches:
+    + upstream/578087-header-strchr.patch: prevent from segfaulting on malformed
+      messages (Closes: 578087)
+
+ -- Antonio Radici <antonio@dyne.org>  Sat, 01 Jan 2011 12:56:29 +0000
 
 mutt (1.5.21-1) experimental; urgency=low
 
diff --git a/debian/patches/series b/debian/patches/series
index e6eedf9..bd9a169 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -39,6 +39,7 @@ upstream/547980-smime_keys-chaining.patch
 upstream/528233-readonly-open.patch
 upstream/228671-pipe-mime.patch
 upstream/383769-score-match.patch
+upstream/578087-header-strchr.patch
 
 upstream/path_max
 
diff --git a/debian/patches/upstream/578087-header-strchr.patch b/debian/patches/upstream/578087-header-strchr.patch
new file mode 100644
index 0000000..07d5903
--- /dev/null
+++ b/debian/patches/upstream/578087-header-strchr.patch
@@ -0,0 +1,14 @@
+This fixes a segfault that can happen on a malformed message; patch comes from
+upstream http://bugs.mutt.org/3483
+
+--- a/sendlib.c
++++ b/sendlib.c
+@@ -1799,7 +1799,7 @@
+   else
+   {
+     t = strchr (start, ':');
+-    if (t > end)
++    if (!t || t > end)
+     {
+       dprint (1, (debugfile, "mwoh: warning: header not in "
+ 		  "'key: value' format!\n"));