bind9/lib
Ondřej Surý 8e240bbb5f Fix isc_buffer_init capacity mismatch in DoH data chunk callback
isc_buffer_init() is given MAX_DNS_MESSAGE_SIZE (65535) as capacity but
only h2->content_length bytes are allocated.  This makes the buffer
believe it has more space than actually allocated.  A secondary bounds
check (new_bufsize <= h2->content_length) prevents actual overflow, but
the buffer invariant is violated.

Pass h2->content_length as the capacity to match the allocation.
2026-03-18 11:39:01 +01:00
..
dns Remove NZF support, make LMDB required for new zone storage 2026-03-18 11:02:33 +01:00
isc Fix isc_buffer_init capacity mismatch in DoH data chunk callback 2026-03-18 11:39:01 +01:00
isccc switch isc_md_type_t to a proper enum 2026-02-02 11:12:55 +03:00
isccfg Remove NZF support, make LMDB required for new zone storage 2026-03-18 11:02:33 +01:00
ns Use clang-format-22 to update formatting 2026-03-04 10:56:41 +01:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00