abc/lwip
1
0
Fork 0
mirror of https://git.savannah.nongnu.org/git/lwip.git synced 2026-08-08 00:23:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

mdns: Fix copying of invalid search result domains

Browse Source 
Fixes bugs #68314 and #68365
This commit is contained in:
Erik Ekman
2026-05-26 22:22:04 +02:00
parent 0c957ec030
commit ab2f69c7d8
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/apps/mdns/mdns.c
View File

@@ -1905,9 +1905,13 @@ mdns_handle_response(struct mdns_packet *pkt, struct netif *netif)
u16_t off = (ans.info.type == DNS_RRTYPE_SRV ? 6 : 0); u16_t off = (ans.info.type == DNS_RRTYPE_SRV ? 6 : 0);
u16_t len = mdns_readname(pkt->pbuf, ans.rd_offset + off, &data.dom); u16_t len = mdns_readname(pkt->pbuf, ans.rd_offset + off, &data.dom);
if (len == MDNS_READNAME_ERROR) { if (len == MDNS_READNAME_ERROR) {
u16_t copy_len = LWIP_MIN(MDNS_DOMAIN_MAXLEN, ans.rd_length - off);
if (ans.rd_length < off) {
/* Skip packet - SRV rd data shorter than fixed header. */
break;
}
/* Ensure result_fn is called anyway, just copy failed domain as is */ /* Ensure result_fn is called anyway, just copy failed domain as is */
data.dom.length = ans.rd_length - off; data.dom.length = pbuf_copy_partial(p, data.dom.name, copy_len, offset + off);
memcpy(&data.dom, (const char *)p->payload + offset + off, data.dom.length);
} }
/* Adjust len/off according RR type */ /* Adjust len/off according RR type */
if (ans.info.type == DNS_RRTYPE_SRV) { if (ans.info.type == DNS_RRTYPE_SRV) {