]> git.ipfire.org Git - thirdparty/knot-dns.git/commitdiff
libknot/rrset-dump: check for valid data length prefix
authorDaniel Salzman <daniel.salzman@nic.cz>
Thu, 26 Mar 2026 13:03:44 +0000 (14:03 +0100)
committerLibor Peltan <libor.peltan@nic.cz>
Tue, 31 Mar 2026 10:33:14 +0000 (12:33 +0200)
src/libknot/rrset-dump.c

index 0691cc945c4a731970cc08679af7acf7cff3e957..30d6c921456095f8c1292e5c3219ca3cccc174c6 100644 (file)
@@ -478,6 +478,7 @@ static void wire_len_data_encode_to_str(rrset_dump_params_t *p,
        }
 
        if (in_len > 0) {
+               CHECK_INMAX(in_len)
                // Encode data directly to the output.
                int ret = enc(p->in, in_len, (uint8_t *)(p->out), p->out_max);
                CHECK_RET_POSITIVE
@@ -536,6 +537,8 @@ static void wire_data_omit(rrset_dump_params_t *p,
                p->in_max -= len_len;
        }
 
+       CHECK_INMAX(in_len)
+
        const char *omit_message = "[omitted]";
        const size_t omlen = strlen(omit_message);