ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

If an uncompressed name will take more than 255 characters and the buffer is

Browse Source 
sufficiently long, dns_name_fromwire should return DNS_R_FORMERR, not
ISC_R_NOSPACE.
This commit is contained in:
Brian Wellington
2000-06-09 01:30:11 +00:00
parent 7e2a4f6ad6
commit f3b52d9fe5
2 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/dns/name.c
View File

@@ -2188,8 +2188,6 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
done = ISC_FALSE;
ndata = (unsigned char *)target->base + target->used;
nrem = target->length - target->used;
if (nrem > 255)
nrem = 255;
nused = 0;
cdata = (unsigned char *)source->base + source->current;
cused = 0;
@@ -2211,6 +2209,8 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
case fw_start:
if (c < 64) {
labels++;
if (nused + c + 1 > 255)
return (DNS_R_FORMERR);
if (nrem < c + 1)
return (ISC_R_NOSPACE);
nrem -= c + 1;
@@ -2239,6 +2239,8 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
state = fw_newcurrent;
} else if (c == DNS_LABELTYPE_BITSTRING) {
labels++;
if (nused == 255)
return (DNS_R_FORMERR);
if (nrem == 0)
return (ISC_R_NOSPACE);
nrem--;
@@ -2276,6 +2278,8 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
n = c / 8;
if ((c % 8) != 0)
n++;
if (nused + n + 1 > 255)
return (DNS_R_FORMERR);
if (nrem < n + 1)
return (ISC_R_NOSPACE);
nrem -= n + 1;