From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 7 Oct 2021 16:06:21 +0000 (-0400)
Subject: set maximum limit
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=715e6319c98e20b45d41e8352878e57893fc7a57;p=thirdparty%2Ffreeradius-server.git

set maximum limit
---

diff --git a/src/protocols/dns/decode.c b/src/protocols/dns/decode.c
index 768c8a5e37b..6cc86a909ba 100644
--- a/src/protocols/dns/decode.c
+++ b/src/protocols/dns/decode.c
@@ -573,6 +573,8 @@ static ssize_t fr_dns_decode_proto(TALLOC_CTX *ctx, fr_pair_list_t *list, uint8_
 	fr_dcursor_t	cursor;
 	fr_dns_ctx_t *packet_ctx = proto_ctx;
 
+	if (data_len > 65535) return -1; /* packet is too big */
+
 	/*
 	 *	Allow queries or answers
 	 */