Make parsing APL strings more robust (not crashing if an ':' or '/' character is...

See bug #404

diff --git a/str2host.c b/str2host.c
index 2eda2f805b64b47550eaef34460ce706e01c0860..4ec9d379bc7760272accf6c80f217b6c04cf6c28 100644 (file)
--- a/str2host.c
+++ b/str2host.c
@@ -460,7 +460,10 @@ ldns_str2rdf_apl(ldns_rdf **rd, const char *str)
        size_t i = 0;
 
        /* [!]afi:address/prefix */
-       if (strlen(my_str) < 2) {
+       if (strlen(my_str) < 2
+                       || strchr(my_str, ':') == NULL
+                       || strchr(my_str, '/') == NULL
+                       || strchr(my_str, ':') > strchr(my_str, '/')) {
                return LDNS_STATUS_INVALID_STR;
        }