From 93947fb447d6bdf4d0e81b1cfea95b043d5d3eaa Mon Sep 17 00:00:00 2001 From: Timo Sirainen Date: Tue, 19 Jan 2010 16:51:47 +0200 Subject: [PATCH] mail_index_update_flags_range(): Fixed out-of-bounds read. --HG-- branch : HEAD --- src/lib-index/mail-index-transaction-update.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib-index/mail-index-transaction-update.c b/src/lib-index/mail-index-transaction-update.c index 526f17497d..0c7d8ecbf6 100644 --- a/src/lib-index/mail-index-transaction-update.c +++ b/src/lib-index/mail-index-transaction-update.c @@ -523,7 +523,7 @@ mail_index_insert_flag_update(struct mail_index_transaction *t, /* merge everything */ idx = first_idx == 0 ? 0 : first_idx - 1; max = I_MIN(t->last_update_idx + 1, count); - for (; idx < max; ) { + for (; idx+1 < max; ) { if (updates[idx].uid2 + 1 == updates[idx+1].uid1 && updates[idx].add_flags == updates[idx+1].add_flags && updates[idx].remove_flags == updates[idx+1].remove_flags) { -- 2.47.3