dovecot-2.2: safe_memset(size=0) triggered read access to data[0...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-2.2/rev/eae44873dbc2
changeset: 17265:eae44873dbc2
user:      Timo Sirainen <tss at iki.fi>
date:      Fri Apr 25 15:52:37 2014 +0300
description:
safe_memset(size=0) triggered read access to data[0], possibly crashing.

diffstat:

 src/lib/safe-memset.c |  3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diffs (13 lines):

diff -r b433260ced36 -r eae44873dbc2 src/lib/safe-memset.c
--- a/src/lib/safe-memset.c	Fri Apr 25 15:46:20 2014 +0300
+++ b/src/lib/safe-memset.c	Fri Apr 25 15:52:37 2014 +0300
@@ -8,6 +8,9 @@
 	volatile unsigned int volatile_zero_idx = 0;
 	volatile unsigned char *p = data;
 
+	if (size == 0)
+		return;
+
 	do {
 		memset(data, c, size);
 	} while (p[volatile_zero_idx] != c);