[asterisk-bugs] [Asterisk 0011408]: Buffer overflow when maxmsg not used for IMAP storage users

[noreply at bugs.digium.com]

The following issue has been ASSIGNED. 
====================================================================== 
http://bugs.digium.com/view.php?id=11408 
====================================================================== 
Reported By:                jaroth
Assigned To:                putnopvut
====================================================================== 
Project:                    Asterisk
Issue ID:                   11408
Category:                   Applications/app_voicemail
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:            SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 90000 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             11-28-2007 14:48 CST
Last Modified:              11-28-2007 16:12 CST
====================================================================== 
Summary:                    Buffer overflow when maxmsg not used for IMAP
storage users
Description: 
When users do not have maxmsg set individually, or when maxmsg is not set,
memory allocation and deallocation of the "deleted" and "heard" arrays can
cause a crash.    This patch uses MAXMSG to size these arrays when using
IMAP.  This guarantees that the array will always be big enough to hold all
messages that might be accessed.  This is even more important when using
IMAP quotas instead of message count to limit the number of messages in a
box, and when mailboxes can be accessed directly from an IMAP mail client. 
====================================================================== 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
11-28-07 16:12  file           Status                   new => assigned     
11-28-07 16:12  file           Assigned To               => putnopvut       
======================================================================