Merge branch 'jk/mailinfo-oob-read-fix'
OOB read fix. * jk/mailinfo-oob-read-fix: mailinfo: fix out-of-bounds memory reads in unquote_quoted_pair()
This commit is contained in:
@ -58,12 +58,12 @@ static void parse_bogus_from(struct mailinfo *mi, const struct strbuf *line)
|
||||
|
||||
static const char *unquote_comment(struct strbuf *outbuf, const char *in)
|
||||
{
|
||||
int c;
|
||||
int take_next_literally = 0;
|
||||
|
||||
strbuf_addch(outbuf, '(');
|
||||
|
||||
while ((c = *in++) != 0) {
|
||||
while (*in) {
|
||||
int c = *in++;
|
||||
if (take_next_literally == 1) {
|
||||
take_next_literally = 0;
|
||||
} else {
|
||||
@ -88,10 +88,10 @@ static const char *unquote_comment(struct strbuf *outbuf, const char *in)
|
||||
|
||||
static const char *unquote_quoted_string(struct strbuf *outbuf, const char *in)
|
||||
{
|
||||
int c;
|
||||
int take_next_literally = 0;
|
||||
|
||||
while ((c = *in++) != 0) {
|
||||
while (*in) {
|
||||
int c = *in++;
|
||||
if (take_next_literally == 1) {
|
||||
take_next_literally = 0;
|
||||
} else {
|
||||
|
Reference in New Issue
Block a user