From: Timo Sirainen <tss@iki.fi>
Date: Tue, 19 Jan 2010 14:51:47 +0000 (+0200)
Subject: mail_index_update_flags_range(): Fixed out-of-bounds read.
X-Git-Tag: 2.0.beta2~57
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=93947fb447d6bdf4d0e81b1cfea95b043d5d3eaa;p=thirdparty%2Fdovecot%2Fcore.git

mail_index_update_flags_range(): Fixed out-of-bounds read.

--HG--
branch : HEAD
---

diff --git a/src/lib-index/mail-index-transaction-update.c b/src/lib-index/mail-index-transaction-update.c
index 526f17497d..0c7d8ecbf6 100644
--- a/src/lib-index/mail-index-transaction-update.c
+++ b/src/lib-index/mail-index-transaction-update.c
@@ -523,7 +523,7 @@ mail_index_insert_flag_update(struct mail_index_transaction *t,
 	/* merge everything */
 	idx = first_idx == 0 ? 0 : first_idx - 1;
 	max = I_MIN(t->last_update_idx + 1, count);
-	for (; idx < max; ) {
+	for (; idx+1 < max; ) {
 		if (updates[idx].uid2 + 1 == updates[idx+1].uid1 &&
 		    updates[idx].add_flags == updates[idx+1].add_flags &&
 		    updates[idx].remove_flags == updates[idx+1].remove_flags) {