Changelog entry for #532

- Merge PR #532 from Shchelk: Fix: buffer overflow bug.
This commit is contained in:
George Thessalonikefs 2022-02-02 10:47:08 +01:00
parent d81e1c999b
commit 506d24c7a6
2 changed files with 6 additions and 0 deletions

View file

@ -1,3 +1,6 @@
2 February 2022: George
- Merge PR #532 from Shchelk: Fix: buffer overflow bug.
1 February 2022: George
- Merge PR #603 from fobser: Use OpenSSL 1.1 API to access DSA and RSA
internals.

View file

@ -604,6 +604,9 @@ sldns_affix_token(sldns_buffer* strbuf, char* token, size_t* token_len,
size_t addstrlen = 0;
/* add space */
/* when addlen < 2, the token buffer is full considering the NULL byte
* from strlen and will lead to buffer overflow with the second
* assignement below. */
if(addlen < 2) return 0;
token[*token_strlen] = ' ';
token[++(*token_strlen)] = 0;