#3547: mutt is not robust enough when reading certificates file
---------------------+------------------------------------------------------
Reporter: hhorak | Owner: mutt-dev
Type: defect | Status: closed
Priority: major | Milestone:
Component: mutt | Version: 1.5.21
Resolution: fixed | Keywords:
---------------------+------------------------------------------------------
Changes (by Brendan Cully <brendan@…>):
* status: new => closed
* resolution: => fixed
Comment:
(In [243710db60e0]) gnutls:tls_compare_certificates: check strstr for
failure (closes #3547)
A malformed certificate file could cause strstr to return an unhandled
NULL.
Thanks to hhorak for the proposed patch. This one is similar but avoids
using
memmem for the first time (I am not sure about its portability).
--
Ticket URL: <http://dev.mutt.org/trac/ticket/3547#comment:3>
Mutt <http://www.mutt.org/>
The Mutt mail user agent