Closed Bug 362542 Opened 18 years ago Closed 16 years ago

investigate apply_rfc2047_encoding to make sure there aren't more problems

Categories

(MailNews Core :: MIME, defect)

Product:
MailNews Core
Component:
MIME
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED
Milestone:
Thunderbird 3.0b4

People

(Reporter: Bienvenu, Assigned: Bienvenu)

Details

apply_rfc2047_encoding allocates a buffer and then starts writing to it, w/o ever checking that it goes past the end of the buffer. I've changed it, in bug 362152, to more conservatively estimate the size of the buffer needed, but it should really check that it's not writing past the end of the allocated buffer
Whiteboard: [sg:investigate]
Product: Core → MailNews Core
Nominating blocking to keep this on the radar, depending on whether we want this for TB3.
Flags: blocking-thunderbird3?
(In reply to comment #0) > apply_rfc2047_encoding allocates a buffer and then starts writing to it, w/o > ever checking that it goes past the end of the buffer. I've changed it, in bug > 362152, to more conservatively estimate the size of the buffer needed, but it > should really check that it's not writing past the end of the allocated buffer David, could you do some more investigation of this please?
sure, I'll put it on my b4 list so I don't lose track of it.
Flags: blocking-thunderbird3? → blocking-thunderbird3+
Target Milestone: --- → Thunderbird 3.0b4
bug 413874 cleaned this all up, so this investigation is complete - marking fixed.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Whiteboard: [sg:investigate]
Group: core-security
You need to log in before you can comment on or make changes to this bug.