[PATCH] dns_resolver: Do not accept domain names longer than 255 chars
From: Manuel Schölling <hidden>
Date: 2014-05-31 16:44:43
Also in:
lkml
Subsystem:
networking [general], the rest · Maintainers:
"David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Linus Torvalds
According to RFC1035 "[...] the total length of a domain name (i.e., label octets and label length octets) is restricted to 255 octets or less." Signed-off-by: Manuel Schölling <redacted> --- net/dns_resolver/dns_query.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/net/dns_resolver/dns_query.c b/net/dns_resolver/dns_query.c
index e7b6d53..e0fde29 100644
--- a/net/dns_resolver/dns_query.c
+++ b/net/dns_resolver/dns_query.c@@ -94,7 +94,7 @@ int dns_query(const char *type, const char *name, size_t namelen, if (!namelen) namelen = strlen(name); - if (namelen < 3) + if (namelen < 3 || namelen > 255) return -EINVAL; desclen += namelen + 1;
--
1.7.10.4