diff options
| author | Jeffrey Stedfast <fejj@helixcode.com> | 2000-11-17 15:18:56 +0800 |
|---|---|---|
| committer | Jeffrey Stedfast <fejj@src.gnome.org> | 2000-11-17 15:18:56 +0800 |
| commit | e14164702f1e20019996f4bbdf272843538de833 (patch) | |
| tree | ae5c37ce0718920b79db538dd7936e23afadf7ca /camel/ChangeLog | |
| parent | 25107cd4d712e05a366ccf772ed0ca40aaaecaa9 (diff) | |
| download | gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.tar gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.tar.gz gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.tar.bz2 gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.tar.lz gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.tar.xz gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.tar.zst gsoc2013-evolution-e14164702f1e20019996f4bbdf272843538de833.zip | |
Use the byte-read count to decrement the number of bytes left to read
2000-11-17 Jeffrey Stedfast <fejj@helixcode.com>
* providers/imap/camel-imap-command.c (imap_read_untagged): Use
the byte-read count to decrement the number of bytes left to read
rather than using strlen. Not only does this protect against a DoS
(embedded NUL chars in the literal string would make strlen
inaccurate) but it also improves performace a little.
* camel-remote-store.c (remote_recv_line): *Sigh* Return the
number of bytes read on success rather than 0. Also don't use
camel_stream_buffer_read_line since we can't get an accurate octet
count.
svn path=/trunk/; revision=6599
Diffstat (limited to 'camel/ChangeLog')
| -rw-r--r-- | camel/ChangeLog | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/camel/ChangeLog b/camel/ChangeLog index d150562199..38ec264d57 100644 --- a/camel/ChangeLog +++ b/camel/ChangeLog @@ -1,3 +1,16 @@ +2000-11-17 Jeffrey Stedfast <fejj@helixcode.com> + + * providers/imap/camel-imap-command.c (imap_read_untagged): Use + the byte-read count to decrement the number of bytes left to read + rather than using strlen. Not only does this protect against a DoS + (embedded NUL chars in the literal string would make strlen + inaccurate) but it also improves performace a little. + + * camel-remote-store.c (remote_recv_line): *Sigh* Return the + number of bytes read on success rather than 0. Also don't use + camel_stream_buffer_read_line since we can't get an accurate octet + count. + 2000-11-17 Not Zed <NotZed@HelixCode.com> * camel-stream-buffer.c (camel_stream_buffer_gets): We should |