This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Paul's DBMail tree".

The branch, dbmail_3_1 has been updated
       via  bdbb590e767bfa4855fed09d8830bd37682cdc76 (commit)
      from  6a0ce903e5ec9da2f7817210468eeb385e953ed2 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit bdbb590e767bfa4855fed09d8830bd37682cdc76
Author: Pavlo Lavrenenko <pavlo.lavrene...@portaone.com>
Date:   Wed Oct 16 10:52:52 2013 +0300

    Copy header values into a NULL-terminated buffer
    
    Blob buffer returned by db_result_get_blob() cannot be used as a C-string
    at least for Oracle DB:
    
      1. libzdb reuses its ResultSet internal buffer allocated for blobs, hence
         it possible to read over the blob length and get blob data remnants 
from
         the previous ResultSet_getBlob() call. e.g.:
    
         > [(Date To Cc From Subject X-Priority Importance Priority 
Content-Type)]
         > [Date: Tue, 15 Oct 2013 14:33:12 +0200 (CEST)
         >  To: santa15 Oct 2013 14:33:12 +0200 (CEST)
         >  From: 000123125@bgum.portaone.com0200 (CEST)
         >  Subject: 111222 333444m.portaone.com0200 (CEST)
         >  X-priority: 3 (Normal)444m.portaone.com0200 (CEST)
         >  Importance: Normalmal)444m.portaone.com0200 (CEST)]
    
      2. blob length is not taken into account, there is no guarantee blob 
buffer
         is null terminated.
    
    Signed-off-by: Paul J Stevens <p...@nfg.nl>

-----------------------------------------------------------------------

Summary of changes:
 src/dbmail-imapsession.c |    5 ++++-
 src/dbmail-message.c     |   11 +++++++----
 2 files changed, 11 insertions(+), 5 deletions(-)


hooks/post-receive
--
Paul's DBMail tree
_______________________________________________
Dbmail-dev mailing list
Dbmail-dev@dbmail.org
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail-dev

Reply via email to