From 9d446142d89af49cdda65eb98054ae4cae69a0f8 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 13 Aug 2020 13:33:32 +1000 Subject: [PATCH] WKS: reject records with zero octets at the end of the bitmap --- lib/dns/rdata/in_1/wks_11.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/dns/rdata/in_1/wks_11.c b/lib/dns/rdata/in_1/wks_11.c index 26eda5d7f6..7be55ada7b 100644 --- a/lib/dns/rdata/in_1/wks_11.c +++ b/lib/dns/rdata/in_1/wks_11.c @@ -268,6 +268,9 @@ fromwire_in_wks(ARGS_FROMWIRE) { if (sr.length > 8 * 1024 + 5) { return (DNS_R_EXTRADATA); } + if (sr.length > 5 && sr.base[sr.length - 1] == 0) { + return (DNS_R_FORMERR); + } if (tr.length < sr.length) { return (ISC_R_NOSPACE); }