Fixes CVE-2014-3618 (heap overflow in formisc.c allowing denial of
service and potential remote execution of arbitrary code).
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3618

Source:
http://seclists.org/oss-sec/2014/q3/495

Adopted by Debian as patch '27':
https://sources.debian.net/src/procmail/3.22-25/debian/patches/27/

--- a/src/formisc.c
+++ b/src/formisc.c
@@ -84,12 +84,11 @@
 	case '"':*target++=delim='"';start++;
       }
      ;{ int i;
-	do
+	while(*start)
 	   if((i= *target++= *start++)==delim)	 /* corresponding delimiter? */
 	      break;
 	   else if(i=='\\'&&*start)		    /* skip quoted character */
 	      *target++= *start++;
-	while(*start);						/* anything? */
       }
      hitspc=2;
    }

<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'>ble class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>refs</a><a class='active' href='/guix/log/tests/size.scm'>log</a><a href='/guix/tree/tests/size.scm?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>tree</a><a href='/guix/commit/tests/size.scm?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>commit</a><a href='/guix/diff/tests/size.scm?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/size.scm'>
<input type='hidden' name='id' value='9f1f22ee70bb961a21571c2adcac36f1b1fb156a'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>root</a>/<a href='/guix/log/tests?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>tests</a>/<a href='/guix/log/tests/size.scm?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a'>size.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/size.scm?id=9f1f22ee70bb961a21571c2adcac36f1b1fb156a&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2018-11-12 23:37:13 +0100'>2018-11-12</span></td><td><a href='/guix/commit/tests/size.scm?id=9ed86fe175c15c819d6d86681c8136ff6bc927c0'>tests: Add 'test-assertm' to (guix tests).</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/tests.scm (test-assertm): New macro.
* tests/gexp.scm (test-assertm): Remove.
* tests/profiles.scm (test-assertm): Remove.
* tests/challenge.scm (%store, test-assertm): Remove.
* tests/debug-link.scm (%store, test-assertm): Remove.
* tests/size.scm (%store, test-assertm): Remove.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-04-07 00:17:16 +0200'>2017-04-07</span></td><td><a href='/guix/commit/tests/size.scm?id=c923f831160ddbda21d8ea1f2df4670550f3e9d8'>size: Add test to multiple 'store-profile' arguments.</a><span class='msg-avail'>...<span class='msg-tooltip'>* tests/size.scm ("store-profile with multiple items"): New test.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2016-05-24 23:05:28 +0200'>2016-05-24</span></td><td><a href='/guix/commit/tests/size.scm?id=a371aa225c2fb0a7071609d10bbddbef353a0da5'>size: 'store-profile' takes a list of store items.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/scripts/size.scm (mappend-map): New procedure.
(store-profile): Change 'item' to 'items' and adjust code accordingly.
(guix-size): Update caller.
* tests/size.scm ("store-profile"): Likewise.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2016-04-03 14:19:09 +0200'>2016-04-03</span></td><td><a href='/guix/commit/tests/size.scm?id=a9edb211e733b8b34e67ec3b4450567e9376986f'>build: Add a Guile custom test driver using SRFI-64.</a><span class='msg-avail'>...<span class='msg-tooltip'>Before that '.log' files for scheme tests were fragmented and not
included in test-suite.log.  This unifies the semantics of SRFI-64 API
with Automake test suite.

* build-aux/test-driver.scm: New file.
* Makefile.am (SCM_LOG_DRIVER, AM_SCM_LOG_DRIVER_FLAGS): New variables.
(SCM_LOG_COMPILER, AM_SCM_LOG_FLAGS): Delete variables.
(AM_TESTS_ENVIRONMENT): Set GUILE_AUTO_COMPILE to 0.
* test-env.in: Silence guix-daemon.
* doc/guix.texi (Running the Test Suite): Describe how to display the
detailed results.  Bug reports require only 'test-suite.log' file.
* tests/base32.scm, tests/build-utils.scm, tests/builders.scm,
tests/challenge.scm, tests/cpan.scm, tests/cpio.scm, tests/cran.scm,
tests/cve.scm, tests/derivations.scm, tests/elpa.scm,
tests/file-systems.scm, tests/gem.scm, tests/gexp.scm,
tests/gnu-maintenance.scm, tests/grafts.scm, tests/graph.scm,
tests/gremlin.scm, tests/hackage.scm, tests/hash.scm,
tests/import-utils.scm, tests/lint.scm, tests/monads.scm, tests/nar.scm,
tests/packages.scm, tests/pk-crypto.scm, tests/pki.scm,
tests/profiles.scm, tests/publish.scm, tests/pypi.scm,
tests/records.scm, tests/scripts-build.scm, tests/scripts.scm,
tests/services.scm, tests/sets.scm, tests/size.scm, tests/snix.scm,
tests/store.scm, tests/substitute.scm, tests/syscalls.scm,
tests/system.scm, tests/ui.scm, tests/union.scm, tests/upstream.scm,
tests/utils.scm: Don't exit at the end of test groups.
* tests/containers.scm: Likewise.  Use 'test-skip' instead of exiting
with error code 77.
</span></span></td><td>Mathieu Lirzin</td></tr>
<tr><td><span title='2015-07-12 01:27:00 +0200'>2015-07-12</span></td><td><a href='/guix/commit/tests/size.scm?id=686784d0b958478a0fd8a2fbf69755ceea2d27ec'>tests: Adjust tests for new bootstrap Guile.</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a followup to commit 5d6792f ("gnu: bootstrap: Create a wrapper for
guile to set the system load path.")

* tests/size.scm ("store-profile"): Expect profile of 'bash' bootstrap binary.
* tests/gexp.scm ("gexp-&gt;derivation #:references-graphs"): Expect GUILE-DRV to
  depend on 'bash' bootstrap binary.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-06-18 00:36:09 +0200'>2015-06-18</span></td><td><a href='/guix/commit/tests/size.scm?id=fcc58db68b2af59dea0cae41bc1e2df47911d588'>Add 'guix size'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/scripts/size.scm: New file.
* Makefile.am (MODULES): Add it.
  (SCM_TESTS): Add tests/size.scm.
* doc.am (SUBCOMMANDS): Add 'size'.
* po/guix/POTFILES.in: Add guix/scripts/size.scm.
* tests/size.scm: New file.
* doc/guix.texi (Packages with Multiple Outputs): Add xref to "Invoking guix
  size".
  (Invoking guix size): New node.
  (Invoking guix gc): Add index for "closure" and xref to the above.
* doc/contributing.texi (Submitting Patches): Use @enumerate for the check
  list.  Add item about 'guix size'.
</span></span></td><td>Ludovic Courtès</td></tr>