#3988: signed integer overflow in mbox_parse_mailbox
--------------------------+----------------------
  Reporter:  josephbisch  |      Owner:  mutt-dev
      Type:  defect       |     Status:  new
  Priority:  major        |  Milestone:
 Component:  mutt         |    Version:
Resolution:               |   Keywords:
--------------------------+----------------------

Comment (by vinc17):

 Moreover, I suppose that without ubsan, there could be an issue if due to
 a huge content-length and wrapping, {{{tmploc}}} would point to a "From "
 of a previous mail, so that the content-length would incorrectly be
 regarded as valid. I haven't tried, but if this is possible, this could be
 bad.

--
Ticket URL: <https://dev.mutt.org/trac/ticket/3988#comment:3>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to