From: Wietse Venema <wietse@porcupine.org>
Date: Sun, 3 Feb 2013 19:45:00 +0000 (-0400)
Subject: postfix-2.8.14
X-Git-Tag: v2.8.14^0
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6397772339ad8ac210cf1db76579dd945be0b609;p=thirdparty%2Fpostfix.git

postfix-2.8.14
---

diff --git a/postfix/HISTORY b/postfix/HISTORY
index a7cfb69e6..3b56408c0 100644
--- a/postfix/HISTORY
+++ b/postfix/HISTORY
@@ -16876,3 +16876,14 @@ Apologies for any names omitted.
 	20101108 change that removes datalink suffixes in the SMTP
 	and QMQP servers, but we leave that code alone.  File:
 	util/myaddrinfo.c.
+
+20130131
+
+	Bugfix: the local(8) delivery agent dereferenced a null
+	pointer while delivering to null command (for example, "|"
+	in a .forward file).  Reported by Gilles Chehade.
+
+20130203
+
+	Bugfix: the 20121010 fix for tls_misc.c was documented but
+	not included.
diff --git a/postfix/src/global/mail_version.h b/postfix/src/global/mail_version.h
index 8e14260bf..46132ff99 100644
--- a/postfix/src/global/mail_version.h
+++ b/postfix/src/global/mail_version.h
@@ -20,8 +20,8 @@
   * Patches change both the patchlevel and the release date. Snapshots have no
   * patchlevel; they change the release date only.
   */
-#define MAIL_RELEASE_DATE	"20121213"
-#define MAIL_VERSION_NUMBER	"2.8.13"
+#define MAIL_RELEASE_DATE	"20130203"
+#define MAIL_VERSION_NUMBER	"2.8.14"
 
 #ifdef SNAPSHOT
 # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
diff --git a/postfix/src/tls/tls_misc.c b/postfix/src/tls/tls_misc.c
index 531be9aec..005633edf 100644
--- a/postfix/src/tls/tls_misc.c
+++ b/postfix/src/tls/tls_misc.c
@@ -453,8 +453,10 @@ int     tls_protocol_mask(const char *plist)
 	else
 	    include |= code =
 		name_code(protocol_table, NAME_CODE_FLAG_NONE, tok);
-	if (code == TLS_PROTOCOL_INVALID)
+	if (code == TLS_PROTOCOL_INVALID) {
+	    myfree(save);
 	    return TLS_PROTOCOL_INVALID;
+	}
     }
     myfree(save);
 
diff --git a/postfix/src/util/exec_command.c b/postfix/src/util/exec_command.c
index 9ab82535e..8629b0c24 100644
--- a/postfix/src/util/exec_command.c
+++ b/postfix/src/util/exec_command.c
@@ -63,7 +63,8 @@ ABCDEFGHIJKLMNOPQRSTUVWXYZ" SPACE_TAB;
     /*
      * See if this command contains any shell magic characters.
      */
-    if (command[strspn(command, ok_chars)] == 0) {
+    if (command[strspn(command, ok_chars)] == 0
+	&& command[strspn(command, SPACE_TAB)] != 0) {
 
 	/*
 	 * No shell meta characters found, so we can try to avoid the overhead