From 7b3f480bb9e1679803a2f632c93d84b3b864c951 Mon Sep 17 00:00:00 2001 From: Timo Sirainen Date: Wed, 15 Jan 2020 22:10:08 +0200 Subject: [PATCH] lib-mail: message_snippet_generate() - Fix potential crash when input ends with '>' This happens only when the mail was large enough and full enough with whitespace that message-parser returned multiple blocks before the snippet was finished. Broken by 74063ed8219d055489d5233b0c02a59886d2078c --- src/lib-mail/message-snippet.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/lib-mail/message-snippet.c b/src/lib-mail/message-snippet.c index 560e499b04..a3cc319d33 100644 --- a/src/lib-mail/message-snippet.c +++ b/src/lib-mail/message-snippet.c @@ -40,6 +40,8 @@ static void snippet_add_content(struct snippet_context *ctx, size_t *count_r) { i_assert(target != NULL); + if (size == 0) + return; if (size >= 3 && ((data[0] == 0xEF && data[1] == 0xBB && data[2] == 0xBF) || (data[0] == 0xBF && data[1] == 0xBB && data[2] == 0xEF))) { -- 2.47.3