Joe Marcus Clarke 2e33212737 * Fix a remote code execution vulnerability in the IMAP provider [1]
* Fix maildir support [2]

Submitted by:	delphij [1]
		Yuri Pankov <yuri@darklight.org.ru> [2]
Obtained from:	GNOME SVN [1]
		http://bugzilla.gnome.org/show_bug.cgi?id=352346 [2]
Security:	This commit contains a fix for CVE-2007-3257 [1]
2007-06-28 03:49:36 +00:00

21 lines
734 B
Plaintext

--- camel/providers/imap/camel-imap-folder.c.orig 2007-06-25 19:05:09.445434798 +0800
+++ camel/providers/imap/camel-imap-folder.c 2007-06-25 19:05:40.454607358 +0800
@@ -655,7 +655,7 @@
uid = g_datalist_get_data (&data, "UID");
flags = GPOINTER_TO_UINT (g_datalist_get_data (&data, "FLAGS"));
- if (!uid || !seq || seq > summary_len) {
+ if (!uid || !seq || seq > summary_len || seq < 0) {
g_datalist_clear (&data);
continue;
}
@@ -2789,7 +2789,7 @@
if (*response != '*' || *(response + 1) != ' ')
return NULL;
- seq = strtol (response + 2, &response, 10);
+ seq = strtoul (response + 2, &response, 10);
if (seq == 0)
return NULL;
if (g_ascii_strncasecmp (response, " FETCH (", 8) != 0)