Add potential buffer overrun check.

git-svn-id: svn+ssh://svn.dolda2000.com/srv/svn/repos/src/icmp-dn@546 959494ce-11ee-0310-bf91-de5d638817bd

diff --git a/src/idnlookup.c b/src/idnlookup.c
index c3847963baa2660d3e13f21e69195e60be3f436a..0fd367fb37482ef206dba81c82be44fd6ecbd3a1 100644 (file)
--- a/src/idnlookup.c
+++ b/src/idnlookup.c
@@ -78,6 +78,10 @@ void printdn(FILE *f, unsigned char *dnbuf, size_t size, int onlyfirst)
                fprintf(stderr, "domain name decompression not implemented, aborting\n");
                exit(1);
            }
+           if((int)*p + (p - dnbuf) >= size) {
+               fprintf(stderr, "malformed domain name\n");
+               return;
+           }
            fprintf(f, "%.*s", (int)*p, p + 1);
            p += 1 + (int)*p;
            if(*p != 0)