From: Stephan Bosch <stephan.bosch@dovecot.fi>
Date: Mon, 14 May 2018 21:56:21 +0000 (+0200)
Subject: lmtp: Fix segfault occurring when a user turns out to be over quota at DATA transfer.
X-Git-Tag: 2.3.2.rc1~78
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9b99269a56c7f178de0baba0b05cc12451c5b18a;p=thirdparty%2Fdovecot%2Fcore.git

lmtp: Fix segfault occurring when a user turns out to be over quota at DATA transfer.

The LMTP recipient context was not updated with the final recipient address when
the RCPT command was accepted. This left a dangling struct smtp_address pointer
which triggered the segfault when used.
---

diff --git a/src/lmtp/lmtp-common.c b/src/lmtp/lmtp-common.c
index b3f13dec41..39ed6c1b4f 100644
--- a/src/lmtp/lmtp-common.c
+++ b/src/lmtp/lmtp-common.c
@@ -22,6 +22,7 @@ void lmtp_recipient_finish(struct lmtp_recipient *rcpt,
 {
 	trcpt->context = rcpt;
 
+	rcpt->path = trcpt->path;
 	rcpt->rcpt = trcpt;
 	rcpt->index = index;
 	rcpt->rcpt_cmd = NULL;