1470013 - Subject "Re: abc char=?" displays as uninitialized buffer in folder message index

Status: RESOLVED DUPLICATE of bug 1466343

(Thunderbird :: Untriaged, defect)

Description

[Neil V.]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20100101

Steps to reproduce:

Compose a message with a Subject header "Re: abc char=?".

(This is in Thunderbird 52.8.0, as packaged for Debian GNU/Linux.)


Actual results:

When the message sent (or in Drafts folder) and viewed in a folder, the Subject header is shown in the folder's message index UI as what appears to be an uninitialized string buffer.

The uninitialized string displayed might be roughly twice the length of the correct string.

The header can be displayed correctly in the message view, however.

(Am marking this as a Security bug, just in case, since I'm not familiar with this code, and don't know whether this behavior can, for example, crash some platform's GUI toolkit that is expecting a sanitized string encoding, or permit some other kind of exploit.)


Expected results:

Since Thunderbird can correctly decode and display the header value in the message view, I assume it can do the same in the folder message index view.

Comment 1

[Magnus Melin [:mkmelin]]

Should be bug 1466343

Comment 2

[Jorg K (CEST = GMT+2)]

Will be fixed in TB 52.9 which will be released in the next few days.