From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Tue, 12 Aug 2014 11:51:48 +0000 (+0100)
Subject: Fix buffer overrun when HTML exceptions are used.
X-Git-Tag: 0.7.0~183
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6688b08c7b4c502ed905c9b46c1f957a96320443;p=thirdparty%2Frspamd.git

Fix buffer overrun when HTML exceptions are used.
---

diff --git a/src/tokenizers/tokenizers.c b/src/tokenizers/tokenizers.c
index eb7a489e5b..6598d66e85 100644
--- a/src/tokenizers/tokenizers.c
+++ b/src/tokenizers/tokenizers.c
@@ -137,11 +137,12 @@ get_next_word (f_str_t * buf, f_str_t * token, GList **exceptions)
 
 	token->len = 0;
 
-	remain = buf->len - (token->begin - buf->begin);
-	if (remain == 0) {
+	pos = token->begin - buf->begin;
+	if (pos >= buf->len) {
 		return NULL;
 	}
-	pos = token->begin - buf->begin;
+
+	remain = buf->len - pos;
 	p = token->begin;
 	/* Skip non delimiters symbols */
 	do {