[courier-users] A small bug that causes SqWebmail crashed

When invalid "&..." is removed, the length of NULL-terminated string
in "tagbuf" should not be changed.


diff -r -U 10 courier-0.52.1/webmail/html.c pcourier-0.52.1/webmail/html.c
--- courier-0.52.1/webmail/html.c Tue Sep 6 01:08:23 2005
+++ pcourier-0.52.1/webmail/html.c Sat Dec 24 06:53:39 2005
@@ -242,21 +242,21 @@

while (*p)
{
if (strchr("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNO PQRSTUVWXYZ0123456789", *p) == NULL)
break;
++p;
}

if (*p != ';')
{
- *q=0;
+ *q=' ';
}
--p;
}

tagattrlen=parseattr(0);
if ( tagattrlen > tagattrsize)
{
struct tagattrinfo *newta= tagattr ? (struct tagattrinfo *)
realloc(tagattr, (tagattrlen+16)*sizeof(*tagattr))
:(struct tagattrinfo *)





-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users