← Back to branch summary

~yolanda.robla/ubuntu/saucy/exim4/update_smtp_banner

« back to all changes in this revision

Viewing changes to src/dkim.c

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2012-10-25 08:22:46 UTC
  • Revision ID: package-import@ubuntu.com-20121025082246-cj5q1jm0qlxebzub
Tags: 4.80-3ubuntu1.1
* SECURITY UPDATE: arbitrary code execution via dns decode logic
  - debian/patches/CVE-2012-5671.patch: adjust max length and validate
    against it in src/pdkim/pdkim.h, src/dkim.c.
  - CVE-2012-5671

Show diffs side-by-side

added added

removed removed

Lines of Context:
src/dkim.c
42
42
               "%.*s", (int)len, (char *)((rr->data)+rr_offset));
43
43
      rr_offset+=len;
44
44
      answer_offset+=len;
 
45
      if (answer_offset >= PDKIM_DNS_TXT_MAX_RECLEN) {
 
46
        return PDKIM_FAIL;
 
47
      }
45
48
    }
46
49
  }
47
50
  else return PDKIM_FAIL;