RIOT-OS/RIOT
RIOT-OS/RIOT
1
0
Fork 0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
Code Releases Activity

dns_msg: skip RDLENGTH_LENGTH field when skipping record

Browse Source 
fixes #20355
This commit is contained in:
Benjamin Valentin 2024-09-09 11:57:15 +02:00
parent 24ad7e72c8
commit 74356c9737
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
sys/net/application_layer/dns/msg.c
View File

@ -168,6 +168,11 @@ int dns_msg_parse_reply(const uint8_t *buf, size_t len, int family,
bufpos += RR_TTL_LENGTH;
unsigned addrlen = ntohs(_get_short(bufpos));
bufpos += RR_RDLENGTH_LENGTH;
if ((bufpos + addrlen) > buflim) {
return -EBADMSG;
}
/* skip unwanted answers */
if ((class != DNS_CLASS_IN) ||
((_type == DNS_TYPE_A) && (family == AF_INET6)) ||
@ -189,10 +194,6 @@ int dns_msg_parse_reply(const uint8_t *buf, size_t len, int family,
(family == AF_UNSPEC))) {
return -EBADMSG;
}
bufpos += RR_RDLENGTH_LENGTH;
if ((bufpos + addrlen) > buflim) {
return -EBADMSG;
}
memcpy(addr_out, bufpos, addrlen);
return addrlen;