Compose window and its identity
Balsa's compose window
BalsaSendmsg has a member
LibBalsaIdentity* ident that reflects the identity of the sender, but does not recognize the possibility that it might be changed or destroyed while the window is open. One consequence of this was that if the identity was destroyed, the list of identities was corrupted, leading to a crash. This particular vulnerability has been patched (6f628231), but broader issues remain.
- If the identity is edited, the user probably expects the draft message to be correspondingly updated;
- If the identity is deleted, the user probably expects… what? That the message is abandoned? That the user is prompted for a different identity? Something else?