The name was checked against "valid existing name" rather than "valid create
name", which mainly meant that the name could have contained control characters
and other things that weren't really intended. This couldn't be used to
cause any security holes though.
int mailbox_list_create_dir(struct mailbox_list *list, const char *name)
{
- if (!mailbox_list_is_valid_existing_name(list, name) || *name == '\0') {
+ if (!mailbox_list_is_valid_create_name(list, name) || *name == '\0') {
mailbox_list_set_error(list, MAIL_ERROR_PARAMS,
"Invalid mailbox name");
return -1;