Browse Source

fix uninitialized variable read

this is basically a security fix for nonsensical configurations:
if the specified CertificateFile did not contain any certificates,
we *might* have accepted an arbitrary server certificate.
wip/maildir-uid-dupes-test
Oswald Buddenhagen 15 years ago
parent
commit
db2bbbfef8
  1. 1
      src/drv_imap.c

1
src/drv_imap.c

@ -255,6 +255,7 @@ verify_cert( imap_store_t *ctx )
srvc->cert_file, strerror( errno ) );
return 0;
}
err = -1;
for (lcert = 0; READ_X509_KEY( fp, &lcert ); )
if (!(err = compare_certificates( lcert, cert, md, n )))
break;

Loading…
Cancel
Save