[InterNetNews/inn] bf5ea7: innd: Better parse Xref in slave mode

[Julien ÉLIE]

  Branch: refs/heads/main
  Home:   https://github.com/InterNetNews/inn
  Commit: bf5ea7899be9506a84740303219748d252b7a338
      https://github.com/InterNetNews/inn/commit/bf5ea7899be9506a84740303219748d252b7a338
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2026-06-21 (Sun, 21 Jun 2026)

  Changed paths:
    M innd/art.c

  Log Message:
  -----------
  innd: Better parse Xref in slave mode

When the Xref header field is badly formatted, ARTxrefslave() does not
correctly computes data->ReplicLength.

For instance with "Xref: group:10\r\n" without a server name, p points
at the beginning of the following header field, or the beginning of the
body, and then:

  data->ReplicLength = strlen("group:10") - strlen("group:10\r\n") = -2

Let's check the coherence of the pointer after the strpbrk() call.

Thanks to Russ Allbery for the patch, and Jesse Rehmer for the report.



To unsubscribe from these emails, change your notification settings at https://github.com/InterNetNews/inn/settings/notifications