Bug#876511: formail: heap-based buffer overflow in loadbuf()

[Jakub Wilk]

* Santiago Vila <sanv...@unex.es>, 2017-11-16, 22:35:

-{ if(buffilled+len>buflen)                    /* buf can't hold the text */
+{ while(buffilled+len>buflen)                         /* buf can't hold the 
text */
     buf=realloc(buf,buflen+=Bsize);

The patch looks to me, and I confirm that it fixes the crash.

--
Jakub Wilk