[Akonadi] [Bug 396980] akonadi_imap_resource segfaults [due to ImapQuotaAttribute in libakonadi-singlefileresource.so]

[Daniel Vrátil]

https://bugs.kde.org/show_bug.cgi?id=396980

Daniel Vrátil <dvratil at kde.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED
      Latest Commit|                            |https://commits.kde.org/kde
                   |                            |pim-runtime/c9254f3497e0cd3
                   |                            |7039333c17085b064e3b323a2

--- Comment #6 from Daniel Vrátil <dvratil at kde.org> ---
Git commit c9254f3497e0cd37039333c17085b064e3b323a2 by Daniel Vrátil, on behalf
of Grzegorz Kowal.
Committed on 10/08/2018 at 09:20.
Pushed by dvratil into branch 'Applications/18.08'.

Fix array access bounds in IMAP resource

Summary:
ImapQuotaAttribute::serialized() processes IMAP roots assigning corresponding
QUOTA and USAGE attributes to each root. It uses three dictionaries: mRoots,
mLimits, and mUsages assuming that these dictionaries always have the same
number of  elements. In a case when mRoots contains more elements than other
two dictionaries, this causes referencing to non-existent elements in mLimits
and mUsages and segfaults.

Fix this by using mLimits.size() and mUsages.size() in corresponding loops.

Reviewers: #kde_pim, dvratil

Reviewed By: #kde_pim, dvratil

Subscribers: mlaurent, cfeck, kde-pim

Tags: #kde_pim

Differential Revision: https://phabricator.kde.org/D14554

M  +2    -2    resources/shared/singlefileresource/imapquotaattribute.cpp

https://commits.kde.org/kdepim-runtime/c9254f3497e0cd37039333c17085b064e3b323a2

-- 
You are receiving this mail because:
You are the assignee for the bug.