dovecot-2.0: imap: Fixed potential out of bounds read.

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-2.0/rev/d406e376f8ee
changeset: 13043:d406e376f8ee
user:      Timo Sirainen <tss at iki.fi>
date:      Thu Feb 09 05:00:49 2012 +0200
description:
imap: Fixed potential out of bounds read.
Found by Christoph Bussenius.

diffstat:

 src/imap/imap-commands-util.c |  4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diffs (14 lines):

diff -r 77a45b0c9f68 -r d406e376f8ee src/imap/imap-commands-util.c
--- a/src/imap/imap-commands-util.c	Thu Feb 09 04:27:44 2012 +0200
+++ b/src/imap/imap-commands-util.c	Thu Feb 09 05:00:49 2012 +0200
@@ -81,8 +81,8 @@
 	}
 
 	/* make sure two hierarchy separators aren't next to each others */
-	for (p = storage_name+1; *p != '\0'; p++) {
-		if (p[0] == ns->real_sep && p[-1] == ns->real_sep) {
+	for (p = storage_name; *p != '\0'; p++) {
+		if (p[0] == ns->real_sep && p[1] == ns->real_sep) {
 			client_send_tagline(cmd, "NO Invalid mailbox name.");
 			return NULL;
 		}