Ensure litlen isn't larger than our mailbox

diff --git a/imap/command.c b/imap/command.c
index 74d12df18eb4c8be6c09377fefc04c42a287ec79..13be77a79d24ec0de90403bcb447954759ca8c14 100644 (file)
--- a/imap/command.c
+++ b/imap/command.c
@@ -635,6 +635,13 @@ static void cmd_parse_status(struct ImapData *idata, char *s)
       idata->status = IMAP_FATAL;
       return;
     }
+
+    if (strlen(idata->buf) < litlen)
+    {
+      mutt_debug(1, "Error parsing STATUS mailbox\n");
+      return;
+    }
+
     mailbox = idata->buf;
     s = mailbox + litlen;
     *s = '\0';