16 lines
511 B
Plaintext
16 lines
511 B
Plaintext
$NetBSD: patch-ac,v 1.6 2011/06/09 00:55:41 schmonz Exp $
|
|
|
|
Fix the security hole found by Matthew Dempsky.
|
|
|
|
--- response.c.orig 2001-02-11 16:11:45.000000000 -0500
|
|
+++ response.c
|
|
@@ -34,7 +34,7 @@ int response_addname(const char *d)
|
|
uint16_pack_big(buf,49152 + name_ptr[i]);
|
|
return response_addbytes(buf,2);
|
|
}
|
|
- if (dlen <= 128)
|
|
+ if ((dlen <= 128) && (response_len < 16384))
|
|
if (name_num < NAMES) {
|
|
byte_copy(name[name_num],dlen,d);
|
|
name_ptr[name_num] = response_len;
|