From: Philippe Antoine <contact@catenacyber.fr>
Date: Thu, 2 Apr 2020 15:28:58 +0000 (+0200)
Subject: lib-mail: message_address_parse_path() - Fix one byte overread
X-Git-Tag: 2.3.11.2~472
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=22c103f1548fb11ba387b9bc3031ff6806acbf96;p=thirdparty%2Fdovecot%2Fcore.git

lib-mail: message_address_parse_path() - Fix one byte overread
---

diff --git a/src/lib-mail/message-address.c b/src/lib-mail/message-address.c
index b1d2a14d1a..fb06afae7b 100644
--- a/src/lib-mail/message-address.c
+++ b/src/lib-mail/message-address.c
@@ -177,7 +177,7 @@ static int parse_angle_addr(struct message_address_parser_context *ctx,
 	if (*ctx->parser.data == '@') {
 		if (parse_domain_list(ctx) > 0 && *ctx->parser.data == ':') {
 			ctx->parser.data++;
-		} else if (parsing_path && *ctx->parser.data != ':') {
+		} else if (parsing_path && (ctx->parser.data >= ctx->parser.end || *ctx->parser.data != ':')) {
 			return -1;
 		} else {
 			if (ctx->fill_missing)