File procmail-3.22-CVE-2014-3618.patch of Package procmail

BNC#894999 - VUL-0: procmail: CVE-2014-3618 procmail: Heap-overflow in
   procmail's formail utility when processing specially-crafted email headers
---
 src/formisc.c |    7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

--- src/formisc.c
+++ src/formisc.c	2014-09-04 08:27:31.827152957 +0000
@@ -83,13 +83,14 @@ normal:	   *target++= *start++;
 	   break;
 	case '"':*target++=delim='"';start++;
       }
-     ;{ int i;
-	do
+      {
+	while(*start)						/* anything? */
+	 { int i;
 	   if((i= *target++= *start++)==delim)	 /* corresponding delimiter? */
 	      break;
 	   else if(i=='\\'&&*start)		    /* skip quoted character */
 	      *target++= *start++;
-	while(*start);						/* anything? */
+	 }
       }
      hitspc=2;
    }
openSUSE Build Service is sponsored by