[src/netbsd-1-6]: src/gnu/dist/sendmail/sendmail Pull up revision 1.13 (reque...

[grant <grant%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/795e40ab9712
branches:  netbsd-1-6
changeset: 530724:795e40ab9712
user:      grant <grant%NetBSD.org@localhost>
date:      Thu Sep 18 09:50:18 2003 +0000

description:
Pull up revision 1.13 (requested by tron in ticket #1473):

fix prescan() bug (potentially remotely exploitable), CAN-2003-0694

diffstat:

 gnu/dist/sendmail/sendmail/parseaddr.c |  4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diffs (15 lines):

diff -r 8015b8c43808 -r 795e40ab9712 gnu/dist/sendmail/sendmail/parseaddr.c
--- a/gnu/dist/sendmail/sendmail/parseaddr.c    Thu Sep 18 01:49:02 2003 +0000
+++ b/gnu/dist/sendmail/sendmail/parseaddr.c    Thu Sep 18 09:50:18 2003 +0000
@@ -538,7 +538,11 @@
                                                addr[MAXNAME] = '\0';
        returnnull:
                                        if (delimptr != NULL)
+                                       {
+                                               if (p > addr)
+                                                       p--;
                                                *delimptr = p;
+                                       }
                                        CurEnv->e_to = saveto;
                                        return NULL;
                                }