search for: maildirsize_read

Timo, In src/plugins/quota/quota-maildir.c, in the maildirsize_read() function, if the maildirsize file is greater that 5120 bytes, this code breaks because the while loop executes multiple times, incrementing size to a value larger than 5120, and then size is later used to referece the buf array out of bounds. To fix it you could add a break statement after &quot...

...================================ This patch skips special directory entries. 2. Under some condition maildirsize contains invalid data Consider a such situation 1. User begins pop3 session 2. dovecot calls this sequence of procedures maildir_quota_transaction_begin -> maildirquota_refresh -> maildirsize_read While reading maildirsize's data, may be situation when mailbox size must be recalculated (maildirsize greater 5120, quotas was changed...). In this case dovecot closes maildirsize's file descriptor (root->fd) and assigns it "-1". After that code calls maildirsize_recalculate -...