ITS#10421 mdb_load: check for malicious input

This commit is contained in:
Howard Chu 2026-01-06 20:52:25 +00:00
parent 1db2a61ade
commit 8e1fda8553

View file

@ -205,6 +205,12 @@ badend:
c1 = buf->mv_data;
len = strlen((char *)c1);
if (!len) {
/* This can only happen with an intentionally invalid input
* with a NUL byte after the leading SPACE
*/
goto badend;
}
l2 = len;
/* Is buffer too short? */