79454ba23ef6baf56997cd3cc23123eb69ae4f4c |
|
24-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
lib-mail: Fix read overflow / crash in message_header_decode()
If the input string was "=?charset?Q|B?text?", the code attempted to look up
the character after it. And if it was "=", the callback was called with
size=-1, which ends up in a crash. |