BIND 10 #177: validation of Name::split() is insufficient

BIND 10 Development do-not-reply at isc.org
Mon May 10 19:44:22 UTC 2010


#177: validation of Name::split() is insufficient
---------------------------+------------------------------------------------
 Reporter:  jinmei         |       Owner:  UnAssigned                 
     Type:  defect         |      Status:  new                        
 Priority:  major          |   Milestone:  03. 1st Incremental Release
Component:  DNSPacket API  |    Keywords:                             
Sensitive:  0              |  
---------------------------+------------------------------------------------
 With the current trunk code, the following test in NameTest could cause a
 crash:

 {{{
     // invalid range: (assuming int is 32-bit) the following parameters
 would
     // cause overflow, bypassing naive validation.
     EXPECT_THROW(example_name.split(1, 0xffffffff), OutOfRange);
 }}}

-- 
Ticket URL: <https://bind10.isc.org/ticket/177>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list