06.CVE-2014-3618.patch revision 3135
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilverThis patch comes from upstream:
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilverhttp://seclists.org/oss-sec/2014/q3/495
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilverWe presume it will be part of a future release of procmail.
09ba3247163582bf2e30e17c4c154aa259ce038acilix
27076069864ad21cb59141a09ad5590ca8df6f1bJohn Smith--- procmail-3.22/src/formisc.c.~2~ 2014-09-04 08:56:27.832599147 -0700
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver+++ procmail-3.22/src/formisc.c 2014-09-04 08:56:54.543558430 -0700
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver@@ -84,12 +84,11 @@
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver case '"':*target++=delim='"';start++;
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver }
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver ;{ int i;
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver- do
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver+ while(*start)
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver if((i= *target++= *start++)==delim) /* corresponding delimiter? */
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver break;
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver else if(i=='\\'&&*start) /* skip quoted character */
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver *target++= *start++;
c8f31ca031aaccc98c131ac22c63e043ca60a049sasilver- while(*start); /* anything? */
a4030d5ca449e7e384bc699cd249ee704faaeab0Chris Morgan }
hitspc=2;
}