On Thu, Jun 18, 2026 at 08:19 +0800, Kevin J. McCarthy wrote:
Since Capabilities[x] elements are short fixed strings (e.g.,
"IMAP4rev1", "CONDSTORE"), ascii_strcasecmp() will return before
reading the uninitialized tmp[126] byte. However, the helper is buggy
in isolation.
This basically sums it up. The comparison function is buggy, but
since mutt controls the list of compared strings we won't hit the bug.
I don't want to accept an AI rewrite just before 2.4.0, so I'll try to
look for alternative fixes. Or if any of you want to take a look and
propose a minimal fix for before I get to it, that would be great too.
All I know is your messages here, but offhand, I don't see a need for
any fix just before a release. A bug that won't happen can wait, can't it?
