cache file: If offset isn't 32bit aligned, assume it's corrupted.

--HG--
branch : HEAD

diff --git a/src/lib-index/mail-cache-lookup.c b/src/lib-index/mail-cache-lookup.c
index 21aaf5c96a261e81aaf655c72f834e2dff83f0d5..6a661f418bedcde3a785e9b7490523e05b7f11e6 100644 (file)
--- a/src/lib-index/mail-cache-lookup.c
+++ b/src/lib-index/mail-cache-lookup.c
@@ -17,6 +17,12 @@ int mail_cache_get_record(struct mail_cache *cache, uint32_t offset,
 
        i_assert(offset != 0);
 
+       if (offset % sizeof(uint32_t) != 0) {
+               /* records are always 32-bit aligned */
+               mail_cache_set_corrupted(cache, "invalid record offset");
+               return -1;
+       }
+
        /* we don't know yet how large the record is, so just guess */
        if (mail_cache_map(cache, offset, sizeof(*rec) + CACHE_PREFETCH) < 0)
                return -1;