38f2261
--- cyrus-imapd-2.2.6/imap/message.c.acceptinvalidfrom	2004-10-30 15:03:02.220642392 -0700
38f2261
+++ cyrus-imapd-2.2.6/imap/message.c	2004-10-30 15:06:01.838336352 -0700
38f2261
@@ -229,6 +229,8 @@
38f2261
     int reject8bit = config_getswitch(IMAPOPT_REJECT8BIT);
38f2261
     int munge8bit = config_getswitch(IMAPOPT_MUNGE8BIT);
38f2261
     int inheader = 1, blankline = 1;
38f2261
+    char is_from;
38f2261
+    static const char * from_header = "From ";
38f2261
 
38f2261
     while (size) {
38f2261
 	n = prot_read(from, buf, size > 4096 ? 4096 : size);
38f2261
@@ -294,8 +296,20 @@
38f2261
 	/* Check for valid header name */
38f2261
 	if (sawnl && buf[0] != ' ' && buf[0] != '\t') {
38f2261
 	    if (buf[0] == ':') return IMAP_MESSAGE_BADHEADER;
38f2261
-	    for (p = (unsigned char *)buf; *p != ':'; p++) {
38f2261
-		if (*p <= ' ') return IMAP_MESSAGE_BADHEADER;
38f2261
+            p = (unsigned char *) buf;
38f2261
+            if (*p == '>')
38f2261
+                p++;
38f2261
+            if (*p == from_header[0])
38f2261
+                is_from = 0;
38f2261
+            else
38f2261
+                is_from = -1;
38f2261
+            for (; *p != ':' && is_from < 5; p++) {
38f2261
+                if (is_from > 0 && *p != from_header[is_from])
38f2261
+                    is_from = -1;
38f2261
+                if (is_from >= 0)
38f2261
+                    is_from++;
38f2261
+                else
38f2261
+                    if (*p <= ' ') return IMAP_MESSAGE_BADHEADER;
38f2261
 	    }
38f2261
 	}
38f2261