Blame SOURCES/dovecot-2.3.13-CVE_2020_24386-part1.patch

b62b43
From 68165c8acc6d32a06f8dce2ef515c714c243ce4e Mon Sep 17 00:00:00 2001
b62b43
From: Timo Sirainen <timo.sirainen@open-xchange.com>
b62b43
Date: Mon, 17 Aug 2020 18:33:20 +0300
b62b43
Subject: [PATCH] imap: Escape tag when sending it to imap-hibernate process
b62b43
b62b43
---
b62b43
 src/imap/imap-client-hibernate.c | 6 ++++--
b62b43
 1 file changed, 4 insertions(+), 2 deletions(-)
b62b43
b62b43
diff --git a/src/imap/imap-client-hibernate.c b/src/imap/imap-client-hibernate.c
b62b43
index f639d722cb..4ef323453c 100644
b62b43
--- a/src/imap/imap-client-hibernate.c
b62b43
+++ b/src/imap/imap-client-hibernate.c
b62b43
@@ -97,8 +97,10 @@ static void imap_hibernate_write_cmd(struct client *client, string_t *cmd,
b62b43
 		str_printfa(cmd, "\tuid=%s", dec2str(user->uid));
b62b43
 	if (user->gid != (gid_t)-1)
b62b43
 		str_printfa(cmd, "\tgid=%s", dec2str(user->gid));
b62b43
-	if (tag != NULL)
b62b43
-		str_printfa(cmd, "\ttag=%s", tag);
b62b43
+	if (tag != NULL) {
b62b43
+		str_append(cmd, "\ttag=");
b62b43
+		str_append_tabescaped(cmd, tag);
b62b43
+	}
b62b43
 	str_append(cmd, "\tstats=");
b62b43
 	str_append_tabescaped(cmd, client_stats(client));
b62b43
 	if (client->command_queue != NULL &&