Fix buffer overrun caused by not updating a string length after address expansion.

diff --git a/copy.c b/copy.c
index 1f1326291e82157bf4943960ecef1da62ccbbf3e..79d52fcb369cf2efdbb91420a7ce40c497685601 100644 (file)
--- a/copy.c
+++ b/copy.c
@@ -254,6 +254,7 @@ mutt_copy_hdr (FILE *in, FILE *out, LOFF_T off_start, LOFF_T off_end, int flags,
     {
       if (!address_header_decode (&this_one))
        rfc2047_decode (&this_one);
+      this_one_len = mutt_strlen (this_one);
     }
     
     if (!headers[x])