procmail/CVE-2014-3618.patch



    1 --- formisc.c 2013-08-04 00:13:33.000000000 -0700
    2 +++ formisc.c 2014-09-03 11:42:25.986002396 -0700
    3 @@ -84,12 +84,11 @@
    4   case '"':*target++=delim='"';start++;
    5        }
    6       ;{ int i;
    7 - do
    8 + while(*start)
    9     if((i= *target++= *start++)==delim) /* corresponding delimiter? */
   10        break;
   11     else if(i=='\\'&&*start)    /* skip quoted character */
   12        *target++= *start++;
   13 - while(*start); /* anything? */
   14        }
   15       hitspc=2;
   16     }