From: James Jones <jejones3141@gmail.com>
Date: Thu, 1 Sep 2022 16:29:43 +0000 (-0500)
Subject: Annotate false positive tainted_data (CID #1503921) (#4711)
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d7d2740eb4b31c8dd73a9cd191446cfa8ee5ef9d;p=thirdparty%2Ffreeradius-server.git

Annotate false positive tainted_data (CID #1503921) (#4711)

By construction, 0 <= offset <= 0x3fff, so it is in range as
a subscript for fr_dns_marker.
---

diff --git a/src/protocols/dns/base.c b/src/protocols/dns/base.c
index bc28d24be84..56cc0091ea0 100644
--- a/src/protocols/dns/base.c
+++ b/src/protocols/dns/base.c
@@ -248,6 +248,7 @@ bool fr_dns_packet_ok(uint8_t const *packet, size_t packet_len, bool query, fr_d
 					return false;
 				}
 
+				/* coverity[tainted_data] */
 				if (!fr_dns_marker[offset]) {
 					DECODE_FAIL(POINTER_TO_NON_LABEL);
 					return false;