upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix Out of Bound Write Compressed Names in rdata_copy(),

Browse source 
reported by X41 D-Sec.
This commit is contained in:
W.C.A. Wijngaards 2019-12-03 16:18:47 +01:00
parent 2d444a5037
commit 6c3a0b54ed
2 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/Changelog
View file

@ -17,6 +17,8 @@
reported by X41 D-Sec. reported by X41 D-Sec.
- Fix Insufficient Handling of Compressed Names in dname_pkt_copy(), - Fix Insufficient Handling of Compressed Names in dname_pkt_copy(),
reported by X41 D-Sec. reported by X41 D-Sec.
- Fix Out of Bound Write Compressed Names in rdata_copy(),
reported by X41 D-Sec.
2 December 2019: Wouter 2 December 2019: Wouter
- Merge pull request #122 from he32: In tcp_callback_writer(), - Merge pull request #122 from he32: In tcp_callback_writer(),

2
util/data/msgreply.c
View file

@ -243,10 +243,10 @@ rdata_copy(sldns_buffer* pkt, struct packed_rrset_data* data, uint8_t* to,
break; break;
} }
if(len) { if(len) {
log_assert(len <= pkt_len);
memmove(to, sldns_buffer_current(pkt), len); memmove(to, sldns_buffer_current(pkt), len);
to += len; to += len;
sldns_buffer_skip(pkt, (ssize_t)len); sldns_buffer_skip(pkt, (ssize_t)len);
log_assert(len <= pkt_len);
pkt_len -= len; pkt_len -= len;
} }
rdf++; rdf++;