ITS#10421 mdb_load: check for malicious input

This commit is contained in:
Howard Chu 2026-01-06 20:52:25 +00:00
parent 8ba07ad711
commit 7b136c42f1

View file

@ -218,6 +218,12 @@ badend:
c1 = buf->mv_data;
len = strlen((char *)c1);
if (!len) {
/* This can only happen with an intentionally invalid input
* with a NUL byte after the leading SPACE
*/
goto badend;
}
l2 = len;
/* Is buffer too short? */