File bsc_1068711.patch of Package ldns.22721
commit c8391790c96d4c8a2c10f9ab1460fda83b509fc2
Author: Willem Toorop <willem@nlnetlabs.nl>
Date: Thu Apr 27 00:14:58 2017 +0200
Check parse limit before t increment
Thanks Stephan Zeisberg
diff --git a/parse.c b/parse.c
index e68627c2..947dbb89 100644
--- a/parse.c
+++ b/parse.c
@@ -118,6 +118,10 @@ ldns_fget_token_l(FILE *f, char *token, const char *delim, size_t limit, int *li
if (line_nr) {
*line_nr = *line_nr + 1;
}
+ if (limit > 0 && (i >= limit || (size_t)(t-token) >= limit)) {
+ *t = '\0';
+ return -1;
+ }
*t++ = ' ';
prev_c = c;
continue;