imap: NOTIFY - Fix potential crash when reading invalid parameters

diff --git a/src/imap/cmd-notify.c b/src/imap/cmd-notify.c
index 94cf103b88e1660f5b6b2fe8b7246b12631ac859..abba017852c3a40d77d10050bd658326c2588ab5 100644 (file)
--- a/src/imap/cmd-notify.c
+++ b/src/imap/cmd-notify.c
@@ -319,6 +319,8 @@ cmd_notify_set(struct imap_notify_context *ctx, const struct imap_arg *args)
 
                if (strcasecmp(filter_mailboxes, "subtree") == 0 ||
                    strcasecmp(filter_mailboxes, "mailboxes") == 0) {
+                       if (event_group->type == IMAP_ARG_EOL)
+                               return -1;
                        mailboxes = event_group++;
                } else {
                        mailboxes = NULL;