Skip to content

Commit 6b84489

Browse files
fix: Prevent stack buffer overflow in set_all_domain_attr
Co-authored-by: aider (gemini/gemini-2.5-pro) <aider@aider.chat>
1 parent 51cc0e1 commit 6b84489

1 file changed

Lines changed: 7 additions & 0 deletions

File tree

modules/tls_mgm/tls_domain.c

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -159,6 +159,13 @@ int set_all_domain_attr(struct tls_domain **dom, char **str_vals, int *int_vals,
159159
if(blob_vals[BLOB_VALS_DHPARAMS_COL].len && blob_vals[BLOB_VALS_DHPARAMS_COL].s)
160160
len += blob_vals[BLOB_VALS_DHPARAMS_COL].len;
161161

162+
if (d->name.len >= sizeof(name_buf)) {
163+
LM_ERR("domain name '%.*s' is too long (max %zu chars)\n",
164+
d->name.len, d->name.s, sizeof(name_buf) - 1);
165+
*dom = d->next;
166+
tls_release_domain(d);
167+
return -1;
168+
}
162169
memcpy(name_buf, d->name.s, d->name.len);
163170
name_len = d->name.len;
164171

0 commit comments

Comments
 (0)