From: Daniel Salzman <daniel.salzman@nic.cz>
Date: Thu, 26 Mar 2026 13:03:44 +0000 (+0100)
Subject: libknot/rrset-dump: check for valid data length prefix
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4efa28802b015f2001f8c170d83601fd8d2bf64e;p=thirdparty%2Fknot-dns.git

libknot/rrset-dump: check for valid data length prefix
---

diff --git a/src/libknot/rrset-dump.c b/src/libknot/rrset-dump.c
index 0691cc945c..30d6c92145 100644
--- a/src/libknot/rrset-dump.c
+++ b/src/libknot/rrset-dump.c
@@ -478,6 +478,7 @@ static void wire_len_data_encode_to_str(rrset_dump_params_t *p,
 	}
 
 	if (in_len > 0) {
+		CHECK_INMAX(in_len)
 		// Encode data directly to the output.
 		int ret = enc(p->in, in_len, (uint8_t *)(p->out), p->out_max);
 		CHECK_RET_POSITIVE
@@ -536,6 +537,8 @@ static void wire_data_omit(rrset_dump_params_t *p,
 		p->in_max -= len_len;
 	}
 
+	CHECK_INMAX(in_len)
+
 	const char *omit_message = "[omitted]";
 	const size_t omlen = strlen(omit_message);