Re: [PATCH v2] nslookup: fix out-of-bounds reads in TXT and SOA record parsing
Ali Ahmet Memis via busybox <[email protected]>
| Newsgroups | gmane.linux.busybox |
|---|---|
| Message-ID | <[email protected]> |
Roberto, apologies - I only saw your reply to v1 after v2 had already gone out, so v2 does not read as a response to it. For the record, v2 does credit your patch and RZP's report below the --- line, and says I am happy to defer if yours is the one being picked up. The one thing v2 adds is the SOA case: the rdlen >= 20 check there is made before the two variable-length names are consumed, so it does not bound the five 32-bit reads that follow. Ali