diff options
| author | Thiago Macieira <thiago.macieira@intel.com> | 2023-05-11 21:40:15 -0700 |
|---|---|---|
| committer | Thiago Macieira <thiago.macieira@intel.com> | 2023-05-14 19:47:03 +0000 |
| commit | 7dba2c87619d558a61a30eb30cc1d9c3fe6df94c (patch) | |
| tree | d9e6d9e39d6e46d525fac4f36a0c1b9ac068b49b /src/corelib/io/qprocess.cpp | |
| parent | 0fc0e821f129d064cc1ce92ad71669ffaf005ca2 (diff) | |
QDnsLookup/Unix: make sure we don't overflow the buffer
The DNS Records are variable length and encode their size in 16 bits
before the Record Data (RDATA). Ensure that both the RDATA and the
Record header fields before it fall inside the buffer we have.
Additionally reject any replies containing more than one query records.
[ChangeLog][QtNetwork][QDnsLookup] Fixed a bug that could cause a buffer
overflow in Unix systems while parsing corrupt, malicious, or truncated
replies.
Pick-to: 5.15 6.2 6.5 6.5.1
Change-Id: I3e3bfef633af4130a03afffd175e4b9547654b95
Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io>
Reviewed-by: Jani Heikkinen <jani.heikkinen@qt.io>
Diffstat (limited to 'src/corelib/io/qprocess.cpp')
0 files changed, 0 insertions, 0 deletions