Files
bind9/lib/dns
Mark Andrews b212d29a71 Silence use of tainted scalar
2607
            43. tainted_argument: Calling function journal_read_xhdr taints argument xhdr.size. [show details]
    2608                        result = journal_read_xhdr(j1, &xhdr);
            44. Condition rewrite, taking true branch.
            45. Condition result == 29, taking false branch.
    2609                        if (rewrite && result == ISC_R_NOMORE) {
    2610                                break;
    2611                        }
            46. Condition result != 0, taking false branch.
    2612                        CHECK(result);
    2613
            47. var_assign_var: Assigning: size = xhdr.size. Both are now tainted.
    2614                        size = xhdr.size;

            CID 331088 (#3 of 3): Untrusted allocation size (TAINTED_SCALAR)
            48. tainted_data: Passing tainted expression size to isc__mem_get, which uses it as an allocation size. [show details]
            Ensure that tainted values are properly sanitized, by checking that their values are within a permissible range.
    2615                        buf = isc_mem_get(mctx, size);

(cherry picked from commit 83fd38dd2c)
2021-07-12 10:45:42 +10:00
..
2021-07-01 14:48:23 +02:00
2021-07-01 15:01:05 +10:00
2021-07-01 14:48:47 +02:00
2021-04-19 14:32:53 +02:00
2020-11-11 15:59:56 -03:00
2021-07-01 14:48:47 +02:00
2021-07-12 10:45:42 +10:00
2021-02-23 09:18:55 +01:00
2021-07-01 14:48:23 +02:00
2020-03-12 00:38:37 -07:00
2020-12-01 23:19:20 +11:00
2020-11-11 15:59:56 -03:00
2020-11-11 15:59:56 -03:00
2021-05-20 09:52:53 +02:00
2021-01-28 12:18:31 +11:00