Re: Fwd: report 3/3: latent unterminated buffer in imap_wordcasecmp()

On Thu, Jun 18, 2026 at 08:19 +0800, Kevin J. McCarthy wrote:

>>Since Capabilities[x] elements are short fixed strings (e.g., 
>>"IMAP4rev1", "CONDSTORE"), ascii_strcasecmp() will return before 
>>reading the uninitialized tmp[126] byte. However, the helper is buggy 
>>in isolation.
>
>This basically sums it up.  The comparison function is buggy, but 
>since mutt controls the list of compared strings we won't hit the bug.
>
>I don't want to accept an AI rewrite just before 2.4.0, so I'll try to 
>look for alternative fixes.  Or if any of you want to take a look and 
>propose a minimal fix for before I get to it, that would be great too.

All I know is your messages here, but offhand, I don't see a need for 
any fix just before a release. A bug that won't happen can wait, can't it?