[src/trunk]: src/gnu/dist/sendmail/sendmail fix prescan() bug (potentially re...

[itojun <itojun%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/67b603e2ba2c
branches:  trunk
changeset: 552060:67b603e2ba2c
user:      itojun <itojun%NetBSD.org@localhost>
date:      Wed Sep 17 14:16:22 2003 +0000

description:
fix prescan() bug (potentially remotely exploitable), CAN-2003-0694

diffstat:

 gnu/dist/sendmail/sendmail/parseaddr.c |  8 ++++++--
 1 files changed, 6 insertions(+), 2 deletions(-)

diffs (25 lines):

diff -r 60027939b0ed -r 67b603e2ba2c gnu/dist/sendmail/sendmail/parseaddr.c
--- a/gnu/dist/sendmail/sendmail/parseaddr.c    Wed Sep 17 13:27:42 2003 +0000
+++ b/gnu/dist/sendmail/sendmail/parseaddr.c    Wed Sep 17 14:16:22 2003 +0000
@@ -1,7 +1,7 @@
-/* $NetBSD: parseaddr.c,v 1.12 2003/06/01 14:07:07 atatat Exp $ */
+/* $NetBSD: parseaddr.c,v 1.13 2003/09/17 14:16:22 itojun Exp $ */
 #include <sys/cdefs.h>
 #ifndef lint
-__RCSID("$NetBSD: parseaddr.c,v 1.12 2003/06/01 14:07:07 atatat Exp $");
+__RCSID("$NetBSD: parseaddr.c,v 1.13 2003/09/17 14:16:22 itojun Exp $");
 #endif
 
 /*
@@ -706,7 +706,11 @@
                                                addr[MAXNAME] = '\0';
        returnnull:
                                        if (delimptr != NULL)
+                                       {
+                                               if (p > addr)
+                                                       p--;
                                                *delimptr = p;
+                                       }
                                        CurEnv->e_to = saveto;
                                        return NULL;
                                }