put_msg_hdr() method now frees/clears the variable-length header fields before

parsing the header object parameter, to prevent duplicate header fields from
being saved back to the message base (bug reported by Guardian Angel).

src/sbbs3/js_msgbase.c

@@ -721,6 +721,8 @@ js_put_msg_header(JSContext *cx, JSObject *obj, uintN argc, jsval *argv, jsval *
 		if(smb_getmsghdr(&(p->smb), &msg)!=0)
 			break;
 
+		smb_freemsghdrmem(&msg);	/* prevent duplicate header fields */
+
 		if(!parse_header_object(cx, p, hdr, &msg))
 			break;