ITS#10421 mdb_load: check for malicious input

This commit is contained in:
Howard Chu 2026-01-06 20:52:25 +00:00
parent 270c543828
commit 46b33d2b45

View file

@ -208,6 +208,12 @@ badend:
c1 = buf->mv_data;
len = strlen((char *)c1);
if (!len) {
/* This can only happen with an intentionally invalid input
* with a NUL byte after the leading SPACE
*/
goto badend;
}
l2 = len;
/* Is buffer too short? */