CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()