mirror of https://git.musl-libc.org/git/musl
Browse Source
The received length field in the message may be greater than the size of the 'answer' buffer in which the message resides. Currently, ABUF_SIZE is 768. And if we get a larger 'alens[i]', it will result in an out-of-bounds reading in __dns_parse(). To fix this, limit the length to the size of the received buffer.master
committed by
Rich Felker
1 changed files with 1 additions and 0 deletions
Loading…
Reference in new issue