From 70bfec73d6dcc2627577ebff3c3f6bf4781dc456 Mon Sep 17 00:00:00 2001
From: chris mikkelson <chris@mikk.net>
Date: Thu, 11 Mar 2010 13:41:54 -0600
Subject: [PATCH] Fix bounds-checking error in quoted-printable decoding loop.

---
 quoted-printable.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/quoted-printable.c b/quoted-printable.c
index b4ef580..e078489 100644
--- a/quoted-printable.c
+++ b/quoted-printable.c
@@ -45,7 +45,7 @@ qp_decode(struct qp_state *qps, char *s, int len,
 	char c;
 	int ret = 0;
 
-	for (*olen = 0; len > 0 && size > 0; s++, len--, ret++) {
+	for (*olen = 0; len > 0 && *olen < size; s++, len--, ret++) {
 		switch(qps->state) {
 		case 0: 
 			if (*s == '=') {
@@ -54,7 +54,6 @@ qp_decode(struct qp_state *qps, char *s, int len,
 			else {
 				*out++ = *s;
 				(*olen)++;
-				size --;
 			}
 			break;
 		case 1:
-- 
2.50.1