BIND 10 #177: validation of Name::split() is insufficient
BIND 10 Development
do-not-reply at isc.org
Mon May 10 19:44:22 UTC 2010
#177: validation of Name::split() is insufficient
---------------------------+------------------------------------------------
Reporter: jinmei | Owner: UnAssigned
Type: defect | Status: new
Priority: major | Milestone: 03. 1st Incremental Release
Component: DNSPacket API | Keywords:
Sensitive: 0 |
---------------------------+------------------------------------------------
With the current trunk code, the following test in NameTest could cause a
crash:
{{{
// invalid range: (assuming int is 32-bit) the following parameters
would
// cause overflow, bypassing naive validation.
EXPECT_THROW(example_name.split(1, 0xffffffff), OutOfRange);
}}}
--
Ticket URL: <https://bind10.isc.org/ticket/177>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list