This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Paul's DBMail tree".
The branch, dbmail_3_1 has been updated
via bdbb590e767bfa4855fed09d8830bd37682cdc76 (commit)
from 6a0ce903e5ec9da2f7817210468eeb385e953ed2 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit bdbb590e767bfa4855fed09d8830bd37682cdc76
Author: Pavlo Lavrenenko <Pavlo.Lavrenenko@portaone.com>
Date: Wed Oct 16 10:52:52 2013 +0300
Copy header values into a NULL-terminated buffer
Blob buffer returned by db_result_get_blob() cannot be used as a C-string
at least for Oracle DB:
1. libzdb reuses its ResultSet internal buffer allocated for blobs, hence
it possible to read over the blob length and get blob data remnants from
the previous ResultSet_getBlob() call. e.g.:
> [(Date To Cc From Subject X-Priority Importance Priority Content-Type)]
> [.Date: Tue, 15 Oct 2013 14:33:12 +0200 (CEST)
> To: santa15 Oct 2013 14:33:12 +0200 (CEST)
> From: 000123125@bgum.portaone.com0200 (CEST)
> Subject: 111222 333444m.portaone.com0200 (CEST)
> X-priority: 3 (Normal)444m.portaone.com0200 (CEST)
> Importance: Normalmal)444m.portaone.com0200 (CEST)]
2. blob length is not taken into account, there is no guarantee blob buffer
is null terminated.
Signed-off-by: Paul J Stevens <paul@nfg.nl>
-----------------------------------------------------------------------
Summary of changes:
src/dbmail-imapsession.c | 5 ++++-
src/dbmail-message.c | 11 +++++++----
2 files changed, 11 insertions(+), 5 deletions(-)
hooks/post-receive
--
Paul's DBMail tree
_______________________________________________
Dbmail-dev mailing list
Dbmail-dev@dbmail.org
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail-dev
generated because a ref change was pushed to the repository containing
the project "Paul's DBMail tree".
The branch, dbmail_3_1 has been updated
via bdbb590e767bfa4855fed09d8830bd37682cdc76 (commit)
from 6a0ce903e5ec9da2f7817210468eeb385e953ed2 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit bdbb590e767bfa4855fed09d8830bd37682cdc76
Author: Pavlo Lavrenenko <Pavlo.Lavrenenko@portaone.com>
Date: Wed Oct 16 10:52:52 2013 +0300
Copy header values into a NULL-terminated buffer
Blob buffer returned by db_result_get_blob() cannot be used as a C-string
at least for Oracle DB:
1. libzdb reuses its ResultSet internal buffer allocated for blobs, hence
it possible to read over the blob length and get blob data remnants from
the previous ResultSet_getBlob() call. e.g.:
> [(Date To Cc From Subject X-Priority Importance Priority Content-Type)]
> [.Date: Tue, 15 Oct 2013 14:33:12 +0200 (CEST)
> To: santa15 Oct 2013 14:33:12 +0200 (CEST)
> From: 000123125@bgum.portaone.com0200 (CEST)
> Subject: 111222 333444m.portaone.com0200 (CEST)
> X-priority: 3 (Normal)444m.portaone.com0200 (CEST)
> Importance: Normalmal)444m.portaone.com0200 (CEST)]
2. blob length is not taken into account, there is no guarantee blob buffer
is null terminated.
Signed-off-by: Paul J Stevens <paul@nfg.nl>
-----------------------------------------------------------------------
Summary of changes:
src/dbmail-imapsession.c | 5 ++++-
src/dbmail-message.c | 11 +++++++----
2 files changed, 11 insertions(+), 5 deletions(-)
hooks/post-receive
--
Paul's DBMail tree
_______________________________________________
Dbmail-dev mailing list
Dbmail-dev@dbmail.org
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail-dev