Blame SOURCES/dovecot-2.3.13-CVE_2020_24386-part1.patch

2c808a
From 68165c8acc6d32a06f8dce2ef515c714c243ce4e Mon Sep 17 00:00:00 2001
2c808a
From: Timo Sirainen <timo.sirainen@open-xchange.com>
2c808a
Date: Mon, 17 Aug 2020 18:33:20 +0300
2c808a
Subject: [PATCH] imap: Escape tag when sending it to imap-hibernate process
2c808a
2c808a
---
2c808a
 src/imap/imap-client-hibernate.c | 6 ++++--
2c808a
 1 file changed, 4 insertions(+), 2 deletions(-)
2c808a
2c808a
diff --git a/src/imap/imap-client-hibernate.c b/src/imap/imap-client-hibernate.c
2c808a
index f639d722cb..4ef323453c 100644
2c808a
--- a/src/imap/imap-client-hibernate.c
2c808a
+++ b/src/imap/imap-client-hibernate.c
2c808a
@@ -97,8 +97,10 @@ static void imap_hibernate_write_cmd(struct client *client, string_t *cmd,
2c808a
 		str_printfa(cmd, "\tuid=%s", dec2str(user->uid));
2c808a
 	if (user->gid != (gid_t)-1)
2c808a
 		str_printfa(cmd, "\tgid=%s", dec2str(user->gid));
2c808a
-	if (tag != NULL)
2c808a
-		str_printfa(cmd, "\ttag=%s", tag);
2c808a
+	if (tag != NULL) {
2c808a
+		str_append(cmd, "\ttag=");
2c808a
+		str_append_tabescaped(cmd, tag);
2c808a
+	}
2c808a
 	str_append(cmd, "\tstats=");
2c808a
 	str_append_tabescaped(cmd, client_stats(client));
2c808a
 	if (client->command_queue != NULL &&