|
Added
Link Here
|
| 1 |
--- imap/browse.c.orig Wed Nov 5 09:41:36 2003 |
| 2 |
+++ imap/browse.c Sat Jul 1 20:47:53 2006 |
| 3 |
@@ -452,7 +452,7 @@ |
| 4 |
if (*s == '\"') |
| 5 |
{ |
| 6 |
s++; |
| 7 |
- while (*s && *s != '\"') |
| 8 |
+ while (*s && *s != '\"' && n < sizeof (ns) - 1) |
| 9 |
{ |
| 10 |
if (*s == '\\') |
| 11 |
s++; |
| 12 |
@@ -463,12 +463,14 @@ |
| 13 |
s++; |
| 14 |
} |
| 15 |
else |
| 16 |
- while (*s && !ISSPACE (*s)) |
| 17 |
+ while (*s && !ISSPACE (*s) && n < sizeof (ns) - 1) |
| 18 |
{ |
| 19 |
ns[n++] = *s; |
| 20 |
s++; |
| 21 |
} |
| 22 |
ns[n] = '\0'; |
| 23 |
+ if (n == sizeof (ns) - 1) |
| 24 |
+ dprint (1, (debugfile, "browse_get_namespace: too long: [%s]\n", ns)); |
| 25 |
/* delim? */ |
| 26 |
s = imap_next_word (s); |
| 27 |
/* delimiter is meaningless if namespace is "". Why does |