This patch comes from upstream:

http://seclists.org/oss-sec/2014/q3/495

We presume it will be part of a future release of procmail.

--- procmail-3.22/src/formisc.c.~2~	2014-09-04 08:56:27.832599147 -0700

+++ procmail-3.22/src/formisc.c	2014-09-04 08:56:54.543558430 -0700

@@ -84,12 +84,11 @@

 	case '"':*target++=delim='"';start++;

       }

      ;{ int i;

-	do

+	while(*start)

 	   if((i= *target++= *start++)==delim)	 /* corresponding delimiter? */

 	      break;

 	   else if(i=='\\'&&*start)		    /* skip quoted character */

 	      *target++= *start++;

-	while(*start);						/* anything? */

       }

      hitspc=2;

    }