Mercurial > hg > nginx
changeset 4556:1bddc91e78d6
Resolver: added missing sanity checking when creating name queries.
Found by Veracode.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Thu, 22 Mar 2012 11:57:18 +0000 |
parents | 555ca31dea18 |
children | b13419459a50 |
files | src/core/ngx_resolver.c |
diffstat | 1 files changed, 5 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/src/core/ngx_resolver.c Thu Mar 22 10:45:08 2012 +0000 +++ b/src/core/ngx_resolver.c Thu Mar 22 11:57:18 2012 +0000 @@ -1840,7 +1840,7 @@ len++; } else { - if (len == 0) { + if (len == 0 || len > 255) { return NGX_DECLINED; } @@ -1851,6 +1851,10 @@ p--; } + if (len == 0 || len > 255) { + return NGX_DECLINED; + } + *p = (u_char) len; return NGX_OK;