Jeremy Smith writes:

while we were looking into the implementation of
quotas with courier, we found a minor memory issue.

in ver 0.48.2,  in maildir/maildirquota.c,  lines
491-492:

      free(newmaildirsizename);
      unlink(newmaildirsizename);

the pointer is being used after it is "freed."

probably not a big deal since it is used in the very
next line (the OS may not have had the chance to reuse
that memory yet) but something like this will cause
alarms in memory tools like mpatrol.  [we did NOT run
mpatrol on the code, this just jumped out at me]

can you reverse these two lines in an upcoming
release?

Thanks. This is even more of a no big deal because this only occurs when there's a hard disk error, or a completely full filesystem.'


Attachment: pgp0PDJ0LRXip.pgp
Description: PGP signature

Reply via email to