Fix vulnerabilites based on email:

  [ISE-TPS-2014-008] Heap Overflow Vulnerability in Haserl 0.9.32

1 files changed, 5 insertions, 2 deletions

diff --git a/src/rfc2388.c b/src/rfc2388.c
index 32c21df..600e11b 100644
--- a/src/rfc2388.c
+++ b/src/rfc2388.c
@@ -137,7 +137,7 @@ mime_tag_add (mime_var_t * obj, char *str)
     {
       a += strlen (tag[0]);
       b = strchr (a, '"');
-      if (!obj->name)
+      if (!obj->name) && ( b )
 	obj->name = mime_substr (a, b - a);
     }
 
@@ -146,7 +146,7 @@ mime_tag_add (mime_var_t * obj, char *str)
     {
       a += strlen (tag[1]);
       b = strchr (a, '"');
-      if (!obj->filename)
+      if (!obj->filename) && ( b )
 	obj->filename = mime_substr (a, b - a);
     }
 
@@ -399,6 +399,9 @@ rfc2388_handler (list_t * env)
   buffer_t buf;
   mime_var_t var;
 
+  /* prevent a potential unitialized free() - ISE-TPS-2014-008 */
+  var.name = NULL;
+
   /* get the boundary info */
   str = getenv ("CONTENT_TYPE");
   i = strlen (str) - 9;