- Fix RPZ's get_tld_label maxdnamelen check

diff --git a/services/rpz.c b/services/rpz.c
index 72397998fc499e08ff6ba2ec1135664813bb161d..37ea2aa5395030855363c009fb89108ccdaf22e6 100644 (file)
--- a/services/rpz.c
+++ b/services/rpz.c
@@ -118,13 +118,17 @@ get_tld_label(uint8_t* dname, size_t maxdnamelen)
        uint8_t* prevlab = dname;
        size_t dnamelen = 0;
 
+       /* one byte needed for label length */
+       if(dnamelen+1 > maxdnamelen)
+               return NULL;
+
        /* only root label */
        if(*dname == 0)
                return NULL;
 
        while(*dname) {
                dnamelen += ((size_t)*dname)+1;
-               if(dnamelen > maxdnamelen)
+               if(dnamelen+1 > maxdnamelen)
                        return NULL;
                dname = dname+((size_t)*dname)+1;
                if(*dname != 0)