mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-06-07 17:52:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Resolver: added missing sanity checking when creating name queries.

Browse Source 
Found by Veracode.
This commit is contained in:
Maxim Dounin 2012-03-22 11:57:18 +00:00
parent 8e6728ef13
commit e34ff16f67
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/core/ngx_resolver.c
View File

@ -1840,7 +1840,7 @@ ngx_resolver_create_name_query(ngx_resolver_node_t *rn, ngx_resolver_ctx_t *ctx)
len++; len++;
} else { } else {
if (len == 0) { if (len == 0 || len > 255) {
return NGX_DECLINED; return NGX_DECLINED;
} }
@ -1851,6 +1851,10 @@ ngx_resolver_create_name_query(ngx_resolver_node_t *rn, ngx_resolver_ctx_t *ctx)
p--; p--;
} }
if (len == 0 || len > 255) {
return NGX_DECLINED;
}
*p = (u_char) len; *p = (u_char) len;
return NGX_OK; return NGX_OK;