View Issue Details

IDProjectCategoryView StatusLast Update
0009324GNUnetutil librarypublic2024-12-09 17:03
Reporterfefe Assigned Toschanzen Due Date
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version0.23.0Fixed in Version0.23.0 
Summary0009324: GNUNET_DNSPARSER_builder_add_query: buffer overflow
Description  1069 ret = GNUNET_DNSPARSER_builder_add_name (dst,
  1070 dst_len
  1071 - sizeof(
  1072 struct GNUNET_TUN_DnsQueryLine),
  1073 off,
  1074 query->name);

dst_len could be < sizeof(...) in which case this would be an integer overflow and corrupt memory.
TagsNo tags attached.

Activities

schanzen

2024-11-05 08:16

administrator   ~0023665

Mantis did noch catch commit strings

schanzen

2024-12-09 17:03

administrator   ~0023823

Released

Issue History

Date ModifiedUsernameFieldChange
2024-11-04 16:06fefeNew Issue
2024-11-04 18:26schanzenTarget Version => 0.22.3
2024-11-05 08:16schanzenNote Added: 0023665
2024-11-05 08:16schanzenStatusnew => resolved
2024-11-05 08:16schanzenResolutionopen => fixed
2024-11-05 08:16schanzenAssigned To => schanzen
2024-11-14 08:43schanzenTarget Version0.22.3 => 0.23.0
2024-12-09 17:03schanzenFixed in Version => 0.23.0
2024-12-09 17:03schanzenNote Added: 0023823
2024-12-09 17:03schanzenStatusresolved => closed