[Dovecot] dovecot 1.1.4 maildir imap segfault in message_parse_header_next

Timo Sirainen tss at iki.fi
Thu Oct 16 12:39:10 EEST 2008


On Oct 16, 2008, at 11:33 AM, Diego Liziero wrote:

> Today a user got this imap segfault with vanilla 1.1.4 (I don't know

Hmm. And Maildir as topic says?

> #0  0x080c8d41 in message_parse_header_next (ctx=0x8774fa0,
> hdr_r=0xbfa438e0) at message-header-parser.c:114

p *ctx.input
p *ctx.input.real_stream

>        size = 0

i_stream_read_data() returned 0 bytes, but

>        ret = -2

it also returned that the input buffer is full. That shouldn't be  
happening. http://hg.dovecot.org/dovecot-1.1/rev/82d4756f43cc should  
catch it earlier.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20081016/5b682212/attachment.bin 


More information about the dovecot mailing list