View Issue Details

IDProjectCategoryView StatusLast Update
0009325GNUnetutil librarypublic2024-12-09 17:03
Reporterfefe Assigned Toschanzen Due Date
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version0.23.0Fixed in Version0.23.0 
Summary0009325: GNUNET_DNSPARSER_builder_add_mx: integer overflow
Description  1105 if (*off + sizeof(uint16_t) > dst_len)
  1106 return GNUNET_NO;

off is a size_t* and comes in as function argument. If the caller was tricked, this could overflow.
TagsNo tags attached.

Activities

schanzen

2024-11-05 08:16

administrator   ~0023664

Mantis did noch catch commit strings

schanzen

2024-12-09 17:03

administrator   ~0023822

Released

Issue History

Date ModifiedUsernameFieldChange
2024-11-04 16:07fefeNew Issue
2024-11-04 18:26schanzenTarget Version => 0.22.3
2024-11-05 08:16schanzenNote Added: 0023664
2024-11-05 08:16schanzenStatusnew => resolved
2024-11-05 08:16schanzenResolutionopen => fixed
2024-11-05 08:16schanzenAssigned To => schanzen
2024-11-14 08:43schanzenTarget Version0.22.3 => 0.23.0
2024-12-09 17:03schanzenFixed in Version => 0.23.0
2024-12-09 17:03schanzenNote Added: 0023822
2024-12-09 17:03schanzenStatusresolved => closed