resolved: rr - don't read past end of RR when parsing NSEC(3)
authorTom Gundersen <teg@jklm.no>
Thu, 23 Jul 2015 11:13:43 +0000 (13:13 +0200)
committerTom Gundersen <teg@jklm.no>
Thu, 23 Jul 2015 16:06:50 +0000 (18:06 +0200)
commit89492aaf99a59b2858e71ebc30f3e123e7c6734c
treefca225fc7f596bd3ee48a95dc94d8129740b952d
parent549c1a2564b56f2bb38f1203d59c747ea15817f3
resolved: rr - don't read past end of RR when parsing NSEC(3)

We can never read past the end of the packet, so this seems impossible
to exploit, but let's error out early as reading past the end of the
current RR is clearly an error.

Found by Lennart, based on patch by Daniel.
src/resolve/resolved-dns-packet.c