[Dovecot] 1.1.5 abort with mal-formed address in header

[Richard Platel]

Hi

An email with a mal-formed address in a header like:

To:(receiver at domain.com

(Starting with a comment, with no closing ')' ) causes dovecot 1.1.5  
to panic and abort.

This is similar to the problem fixed by: http://hg.dovecot.org/ 
dovecot-1.1/rev/04fdaa2f831e

This patch seems to resolve the problem:

--- dovecot-1.1.5/src/lib-mail/message-address.c.orig   2008-10-23  
22:17:10.243827000 +0000
+++ dovecot-1.1.5/src/lib-mail/message-address.c        2008-10-23  
22:20:20.050173000 +0000
@@ -315,7 +315,7 @@
         ctx.fill_missing = fill_missing;

         ret = rfc822_skip_lwsp(&ctx.parser);
-       if (ret == 0) {
+       if (ret <= 0) {
                 /* no addresses */
                 return NULL;
         }



Richard Platel
rplatel at tucows.com