Re: [PATCH v2] nslookup: fix out-of-bounds reads in TXT and SOA record parsing

Ali Ahmet Memis via busybox <[email protected]>
Newsgroups gmane.linux.busybox
Message-ID <[email protected]>
Roberto,

apologies - I only saw your reply to v1 after v2 had already gone out,
so v2 does not read as a response to it.

For the record, v2 does credit your patch and RZP's report below the
--- line, and says I am happy to defer if yours is the one being
picked up.

The one thing v2 adds is the SOA case: the rdlen >= 20 check there is
made before the two variable-length names are consumed, so it does not
bound the five 32-bit reads that follow.

Ali
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.