#3988: signed integer overflow in mbox_parse_mailbox --------------------------+---------------------- Reporter: josephbisch | Owner: mutt-dev Type: defect | Status: new Priority: major | Milestone: Component: mutt | Version: Resolution: | Keywords: --------------------------+----------------------
Comment (by vinc17): Moreover, I suppose that without ubsan, there could be an issue if due to a huge content-length and wrapping, {{{tmploc}}} would point to a "From " of a previous mail, so that the content-length would incorrectly be regarded as valid. I haven't tried, but if this is possible, this could be bad. -- Ticket URL: <https://dev.mutt.org/trac/ticket/3988#comment:3> Mutt <http://www.mutt.org/> The Mutt mail user agent