From b42d20eab78f1389d00e1380d7c44fbdbec12e9d Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Fri, 15 May 2026 07:15:35 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by Orbis Security AI --- src/imap/imap-state.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/imap/imap-state.c b/src/imap/imap-state.c index 3a2ef457f8e..b4ef0b62d35 100644 --- a/src/imap/imap-state.c +++ b/src/imap/imap-state.c @@ -505,7 +505,7 @@ import_state_mailbox_struct(const unsigned char *data, size_t size, } /* GUID */ - if (end-p < (int)sizeof(state_r->mailbox_guid)) { + if (p >= end || (size_t)(end-p) < sizeof(state_r->mailbox_guid)) { *error_r = "Mailbox state truncated at GUID"; return 0; }